Bugfixing

server/api/membership/update-status.put.js

@@ -1,10 +1,13 @@
 import fs from 'fs/promises'
 import path from 'path'
+import { requireUserWithAnyRole } from '../../utils/auth.js'
 import { decryptObject } from '../../utils/encryption.js'
 import { saveMember } from '../../utils/members.js'
 
 export default defineEventHandler(async (event) => {
   try {
+    await requireUserWithAnyRole(event, 'admin', 'vorstand')
+
     const { id, status, notes } = await readBody(event)
     
     if (!id || !status) {