Add command permission checks

Level 0: Every user - Public commands
Level 1: Guild owners or members with respective admin role - Elevated guild commands
Level 2: Global admins - Every command including levels below

commands/debug.js

@@ -13,7 +13,7 @@ module.exports = {
                     .setDescription("The command to debug")
                     .setRequired(false)
                 ),
-
+    permissionLevel: 2,
     async execute(interaction) {
         const identifier = CardUtils.generateIdentifier();
         let user = await UserUtils.getUserByDiscordId(interaction.member.id);
@@ -70,6 +70,13 @@ module.exports = {
                 content: `Reset cooldowns`,
                 ephemeral: false
             });
+            break;
+        default:
+            interaction.reply({
+                content: `Your permission level is ${await UserUtils.getPermissionLevel(interaction.member)}`,
+                ephemeral: false
+            });
+            break;
         }
     }
 }

commands/debugDrop.js

@@ -12,7 +12,7 @@ module.exports = {
                     .setDescription("The id of the character to drop")
                     .setRequired(true)
                 ),
-
+    permissionLevel: 2,
     async execute(interaction) {
         //get user id from database given the userID
         const user = await User.findOne({

commands/guildSettings.js

@@ -0,0 +1,61 @@
+const { SlashCommandBuilder, ComponentType, ActionRowBuilder, ButtonBuilder, ButtonStyle, SelectMenuBuilder } = require("discord.js");
+const { GeneralUtils, GuildUtils } = require("../util");
+
+module.exports = {
+    data: new SlashCommandBuilder()
+            .setName("settings")
+            .setDescription("Change Guild Settings"),
+    permissionLevel: 1,
+
+    async execute(interaction) {
+        let reply = "Guild settings:\n";
+        const row = new ActionRowBuilder();
+        row.addComponents(
+            new ButtonBuilder()
+                .setCustomId(`set-admin-role`)
+                .setLabel('Set Admin Role')
+                .setStyle(ButtonStyle.Primary)
+        );
+        const message = await interaction.reply({ content: reply, components: [row], fetchReply: true });
+
+        const filter = (m) => m.author.id === message.author.id;
+        const collector = message.createMessageComponentCollector(filter, { componentType: ComponentType.Button, time: 120000 });
+
+        //BUGBUG: end callback does not trigger
+        collector.on('end', collected => {
+            console.log(`Collected ${collected.size} interactions.`);
+            message.edit({ components: [] });
+        });
+        
+        collector.on('collect', async m => {
+            switch (m.customId) {
+            case 'set-admin-role':
+                //Build select menu with every role in the guild
+                const row = new ActionRowBuilder()
+                    .addComponents(
+                        new SelectMenuBuilder()
+                            .setCustomId('select')
+                            .setPlaceholder('Nothing selected')
+                            .addOptions(
+                                m.guild.roles.cache.map(role => ({
+                                    label: role.name,
+                                    description: role.id, 
+                                    value: role.id
+                                }))
+                            ),
+                    );
+                const message = await m.reply({ content: 'Select a role', components: [row], fetchReply: true });
+
+                const filter = (m) => m.author.id === message.author.id;
+                const replyCollector = message.createMessageComponentCollector(filter, { componentType: ComponentType.SelectMenu, time: 25000 });
+                replyCollector.on('collect', async r => {
+                    const role = m.guild.roles.cache.find(role => role.id === r.values[0]);
+                    m.deleteReply(); //Delete select menu message
+                    GuildUtils.setProperty(m.guild.id, 'adminRoleId', role.id);
+                    r.reply({ content: `Selected role: ${role.name} \n(${role.id})`, components: [] });
+                });    
+                break;
+            }
+        });
+    }
+}

commands/ping.js

@@ -4,6 +4,7 @@ module.exports = {
     data: new SlashCommandBuilder()
             .setName("ping")
             .setDescription("Ping, yes"),
+    permissionLevel: 1,
     async execute(interaction) {
         interaction.reply({
             content: "Pong!",

events/interactionCreate.js

@@ -35,8 +35,20 @@ module.exports = {
             });
 
         }
-        
+
         const command = interaction.client.commands.get(interaction.commandName);
+        
+        //check if user has permissions to run the command
+        //TODO: pass down this user object to avoid duplicate queries
+        let user = await UserUtils.getUserByDiscordId(interaction.member.id);
+        let permissionLevel = await UserUtils.getPermissionLevel(interaction.member);
+        if (command.permissionLevel > permissionLevel) {
+            interaction.reply({
+                content: `You do not have permission to run this command`,
+                ephemeral: true
+            });
+            return;
+        }
 
         if (!command) return;
 

util/general.js

@@ -5,5 +5,11 @@ module.exports = {
     getBotProperty: async function(property) {
         let bot = await Bot.findOne();
         return property ? bot[property] : bot;
+    },
+
+    setBotProperty: async function(property, value) {
+        let bot = await Bot.findOne();
+        bot[property] = value;
+        await bot.save();
     }
 }

util/guilds.js

@@ -0,0 +1,23 @@
+const { Guild } = require("../models");
+
+module.exports = {
+    name: "GuildUtils",
+    getProperty: async function(guildId, property) {
+        let guild = await Guild.findOne({
+            where: {
+                guildId: guildId
+            }
+        });
+        return property ? guild[property] : guild;
+    },
+
+    setProperty: async function(guildId, property, value) {
+        let guild = await Guild.findOne({
+            where: {
+                guildId: guildId
+            }
+        });
+        guild[property] = value;
+        await guild.save();
+    }
+}

util/users.js

@@ -1,4 +1,5 @@
-const { User } = require("../models");
+const { User, Guild } = require("../models");
+const GeneralUtils = require("./general");
 
 module.exports = {
     name: "UserUtils",
@@ -65,5 +66,37 @@ module.exports = {
         let newCooldown = new Date(new Date().getTime() + cooldown);
         user[`next${cooldownType[0].toUpperCase() + cooldownType.slice(1)}`] = newCooldown;
         await user.save();
+    },
+
+    getPermissionLevel: async function(user) {
+        /* THIS FUNCTION EXPECTS A DISCORD USER INSTANCE!  
+        * Returns the permission level of the user
+        * 0 - no permissions
+        * 1 - guild permissions
+        * 2 - admin permissions
+        */
+        let guild = await Guild.findOne({
+            where: {
+                guildId: user.guild.id
+            }
+        });
+
+        //Global Admin
+        let adminIDs = await GeneralUtils.getBotProperty("adminIDs");
+        if (adminIDs.includes(user.id)) {
+            return 2;
+        }
+        
+        //Guild Admin if role is present
+        if(user._roles.includes(String(guild.adminRoleId))) {
+            return 1;
+        }
+        //or if user is owner
+        if(user.guild.ownerId === user.id) {
+            return 1;
+        }
+
+        //Regular User
+        return 0;
     }
 }