serenity-rs / poise

Discord bot command framework for serenity, with advanced features like edit tracking and flexible argument parsing
MIT License
653 stars 114 forks source link

Fix default_member_permissions not being checked for context_menu_command #297

Open zkxs opened 2 months ago

zkxs commented 2 months ago

Commands with context_menu_command set currently ignore default_member_permissions. This PR fixes that. I personally view this as a security issue, as it's very easy to make a command intended for privileged users and overlook the fact that the permissions are only enforced on the slash command variant and not the context menu command.