From b5365f01f95bad181661ab87e380c75874f8c3a5 Mon Sep 17 00:00:00 2001 From: Cal Corum Date: Wed, 28 Jan 2026 16:10:52 -0600 Subject: [PATCH] Fix custom command delete permission check using wrong ID field Changed from command.creator_id (database ID) to command.creator.discord_id to properly compare against the deleter's Discord user ID. Co-Authored-By: Claude Opus 4.5 --- VERSION | 2 +- services/custom_commands_service.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/VERSION b/VERSION index 9738a24..0bd6cbc 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.28.1 +2.28.2 diff --git a/services/custom_commands_service.py b/services/custom_commands_service.py index b1fe7ee..13c5b2a 100644 --- a/services/custom_commands_service.py +++ b/services/custom_commands_service.py @@ -239,7 +239,7 @@ class CustomCommandsService(BaseService[CustomCommand]): command = await self.get_command_by_name(name) # Check permissions (unless force delete) - if not force and command.creator_id != deleter_discord_id: + if not force and command.creator.discord_id != deleter_discord_id: raise CustomCommandPermissionError("You can only delete commands you created") # Delete via API