Files
OwnCord/Server/migrations/005_fix_member_permissions.sql
jevb fa1435e4de fix: address critical and high code review findings
- C-1: handle filepath.Abs error in backup path traversal guards
- C-2: WAL checkpoint before live DB restore to prevent corruption
- C-4: default AllowedOrigins to empty (deny cross-origin by default)
- C-5: renumber duplicate 003_ migration prefix (003-008 -> 003-009)
- H-1: sanitize FTS5 query input to prevent operator injection
- H-3: send SIGTERM for graceful shutdown before os.Exit in updater
- H-9: fix RingBuffer memory leak from unbounded backing array growth
- H-10: use errorResponse struct consistently in upload handler
2026-03-31 18:46:33 +02:00

7 lines
401 B
SQL

-- Migration 004: Fix Member role permissions
-- The Member role was missing READ_MESSAGES (0x2), ATTACH_FILES (0x20),
-- and ADD_REACTIONS (0x40) bits. Also had MUTE_MEMBERS which is mod-level.
-- New value: 0x663 = SEND_MESSAGES | READ_MESSAGES | ATTACH_FILES |
-- ADD_REACTIONS | CONNECT_VOICE | SPEAK_VOICE
UPDATE roles SET permissions = 1635 WHERE id = 4 AND name = 'Member';