diff --git a/PluralKit.API/Controllers/v2/AutoproxyControllerV2.cs b/PluralKit.API/Controllers/v2/AutoproxyControllerV2.cs index 23a118be..25227322 100644 --- a/PluralKit.API/Controllers/v2/AutoproxyControllerV2.cs +++ b/PluralKit.API/Controllers/v2/AutoproxyControllerV2.cs @@ -57,7 +57,11 @@ public class AutoproxyControllerV2: PKControllerBase PKMember? member = null; if (updateMember) + { member = await ResolveMember(data.Value("autoproxy_member")); + if (member != null && ContextFor(member) != LookupContext.ByOwner) + throw Errors.GenericMissingPermissions; + } var patch = AutoproxyPatch.FromJson(data, member?.Id);