fix: permission mistake in team

Author: ElaBosak233

crates/db/src/util/mod.rs

@@ -7,10 +7,6 @@ use crate::{entity::team::State, get_db};
 
 pub async fn is_user_in_team(user_id: i64, team_id: i64) -> Result<bool, DbErr> {
     Ok(crate::entity::team_user::Entity::find()
-        .join(
-            JoinType::InnerJoin,
-            crate::entity::team_user::Relation::Team.def().rev(),
-        )
         .filter(crate::entity::team_user::Column::UserId.eq(user_id))
         .filter(crate::entity::team_user::Column::TeamId.eq(team_id))
         .count(get_db())

crates/web/src/router/api/game/game_id/team/team_id/mod.rs

@@ -82,7 +82,7 @@ pub async fn delete_team(
     Extension(ext): Extension<Ext>, Path((_game_id, team_id)): Path<(i64, i64)>,
 ) -> Result<WebResponse<()>, WebError> {
     let operator = ext.operator.ok_or(WebError::Unauthorized(json!("")))?;
-    if operator.group != Group::Admin {
+    if operator.group != Group::Admin && !cds_db::util::is_user_in_team(operator.id, team_id).await? {
         return Err(WebError::Forbidden(json!("")));
     }
 

crates/web/src/router/api/game/game_id/team/team_id/token/mod.rs

@@ -31,7 +31,7 @@ pub async fn create_token(
             .ok_or(WebError::BadRequest(json!("team_not_found")))?,
     );
 
-    if operator.group != Group::Admin && cds_db::util::is_user_in_team(operator.id, team.id).await?
+    if operator.group != Group::Admin && !cds_db::util::is_user_in_team(operator.id, team.id).await?
     {
         return Err(WebError::Forbidden(json!("")));
     }
@@ -61,7 +61,7 @@ pub async fn get_token(
             .ok_or(WebError::BadRequest(json!("team_not_found")))?,
     );
 
-    if operator.group != Group::Admin && cds_db::util::is_user_in_team(operator.id, team.id).await?
+    if operator.group != Group::Admin && !cds_db::util::is_user_in_team(operator.id, team.id).await?
     {
         return Err(WebError::Forbidden(json!("")));
     }
@@ -89,7 +89,7 @@ pub async fn delete_token(
             .ok_or(WebError::BadRequest(json!("team_not_found")))?,
     );
 
-    if operator.group != Group::Admin && cds_db::util::is_user_in_team(operator.id, team.id).await?
+    if operator.group != Group::Admin && !cds_db::util::is_user_in_team(operator.id, team.id).await?
     {
         return Err(WebError::Forbidden(json!("")));
     }