Security patch, logs command now requires manage message perms

Author: kyb3r

CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+# v2.0.2
+
+### Security
+- Made the logs command require manage messages permissions to execute. 
+    - Before this patch, anyone could use the logs commands.
+
+
 # v2.0.1
 
 Bug fixes and minor improvements.

bot.py

@@ -22,7 +22,7 @@
 SOFTWARE.
 """
 
-__version__ = '2.0.1'
+__version__ = '2.0.2'
 
 import asyncio
 import textwrap

cogs/modmail.py

@@ -171,6 +171,7 @@ async def nsfw(self, ctx):
         await ctx.message.add_reaction('✅')
 
     @commands.command()
+    @commands.has_permissions(manage_messages=True)
     @trigger_typing
     async def logs(self, ctx, *, member: Union[discord.Member, discord.User]=None):
         """Shows a list of previous modmail thread logs of a member."""