MAJOR ISSUE FIX: permission checking for ;adduser fixed

Author: luphoria

src/commands/adduser.ts

@@ -22,8 +22,8 @@ export async function runAddUserCommand(
         "m.room.power_levels",
         ""
       );
-      console.log(power_levels);
-      if (power_levels["users"]?.[event.sender] < 100) { // checks if user is an Admin
+      console.log(power_levels["users"]);
+      if (power_levels["users"]?.[event.sender] < 100 || !power_levels["users"][event.sender]) { // checks if user is an Admin
         return client.sendMessage(roomId, {
           body: "You aren't a moderator!",
           msgtype: "m.notice",

src/commands/deleteuser.ts

@@ -17,20 +17,12 @@ export async function runDeleteUserCommand(
   console.log(formatted_body);
 
   if (!lookup_user(event.sender).moderator) {
-    let power_levels = await client.getRoomStateEvent(
-      roomId,
-      "m.room.power_levels",
-      ""
-    );
-    console.log(power_levels);
-    if (power_levels["users"]?.[event.sender] < 100) { // checks if user is an Admin
       return client.sendMessage(roomId, {
         body: "You aren't a moderator!",
         msgtype: "m.notice",
         format: "org.matrix.custom.html",
         formatted_body: "You aren't a moderator!",
       });
-    }
   }
 
   if (!args[1]) {