From fb207dc7c717c50b153b3d9282716353c15c34b4 Mon Sep 17 00:00:00 2001
From: julius <julius@0124816.xyz>
Date: Fri, 19 Dec 2025 12:48:23 +0100
Subject: [PATCH] let admin disable players

---
 cutt/player.py | 25 +++++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/cutt/player.py b/cutt/player.py
index 11ceafa..15aae28 100644
--- a/cutt/player.py
+++ b/cutt/player.py
@@ -110,7 +110,7 @@ class DisablePlayerRequest(BaseModel):
     player_id: int
 
 
-def disable_player(
+def disable_player_team(
     r: DisablePlayerRequest,
     request: Annotated[TeamScopedRequest, Depends(verify_team_scope)],
 ):
@@ -135,6 +135,21 @@ def disable_player(
             )
 
 
+def disable_player(r: DisablePlayerRequest):
+    with Session(engine) as session:
+        player = session.exec(select(P).where(P.id == r.player_id)).one_or_none()
+        if player:
+            player.disabled = True
+            session.add(player)
+            session.commit()
+            return PlainTextResponse(f"disabled {player.display_name}")
+        else:
+            raise HTTPException(
+                status_code=status.HTTP_404_NOT_FOUND,
+                detail="no such player found in your team",
+            )
+
+
 def add_player_to_team(player_id: int, team_id: int):
     with Session(engine) as session:
         player = session.exec(select(P).where(P.id == player_id)).one()
@@ -226,7 +241,7 @@ player_router.add_api_route(
 )
 player_router.add_api_route(
     "/{team_id}",
-    endpoint=disable_player,
+    endpoint=disable_player_team,
     methods=["DELETE"],
 )
 player_router.add_api_route(
@@ -246,6 +261,12 @@ player_router.add_api_route(
     methods=["GET"],
     dependencies=[Security(get_current_active_user, scopes=["admin"])],
 )
+player_router.add_api_route(
+    "/disable/{player_id}",
+    endpoint=disable_player,
+    methods=["GET"],
+    dependencies=[Security(get_current_active_user, scopes=["admin"])],
+)
 player_router.add_api_route("/me", endpoint=read_player_me, methods=["GET"])
 player_router.add_api_route("/me/teams", endpoint=read_teams_me, methods=["GET"])
 player_router.add_api_route(