From a37c112c39500f36e2a7f26b68af6f6395ed34dc Mon Sep 17 00:00:00 2001
From: ben <ben.de-roo.org>
Date: Mon, 3 Aug 2026 18:01:44 +0200
Subject: [PATCH] updates

---
 backend/main.py | 37 +++++++++++++++++++++++++++++++++++--
 1 file changed, 35 insertions(+), 2 deletions(-)

diff --git a/backend/main.py b/backend/main.py
index 73fcb2e..6b1966f 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -2,7 +2,6 @@ from fastapi import FastAPI, Depends
 from pydantic import BaseModel
 
 from database import fetch_all, fetch_one
-from events import create_event, get_user_events
 from auth import create_user, verify_user, create_token, get_current_user
 from rooms import create_room, search_room, accept_room
 from permissions import has_role
@@ -295,6 +294,41 @@ def respond_event(
     user_id: int = Depends(get_current_user)
 ):
 
+    event = fetch_one(
+        """
+        SELECT room_id
+        FROM events
+        WHERE id = ?
+        """,
+        (event_id,)
+    )
+
+    if event is None:
+        raise HTTPException(
+            status_code=404,
+            detail="event not found"
+        )
+
+    member = fetch_one(
+        """
+        SELECT *
+        FROM room_members
+        WHERE room_id = ?
+        AND user_id = ?
+        """,
+        (
+            event["room_id"],
+            user_id
+        )
+    )
+
+    if member is None:
+        raise HTTPException(
+            status_code=403,
+            detail="not a room member"
+        )
+
+
     respond_to_event(
         event_id,
         user_id,
@@ -308,7 +342,6 @@ def respond_event(
         "going": count_confirmations(event_id)
     }
 
-
 print()
 print("YOU CAN NOT START THE SERVER WITH PYTHON")
 print("start with:")