updates

backend/main.py

@@ -2,7 +2,6 @@ from fastapi import FastAPI, Depends
 from pydantic import BaseModel
 
 from database import fetch_all, fetch_one
-from events import create_event, get_user_events
 from auth import create_user, verify_user, create_token, get_current_user
 from rooms import create_room, search_room, accept_room
 from permissions import has_role
@@ -295,6 +294,41 @@ def respond_event(
     user_id: int = Depends(get_current_user)
 ):
 
+    event = fetch_one(
+        """
+        SELECT room_id
+        FROM events
+        WHERE id = ?
+        """,
+        (event_id,)
+    )
+
+    if event is None:
+        raise HTTPException(
+            status_code=404,
+            detail="event not found"
+        )
+
+    member = fetch_one(
+        """
+        SELECT *
+        FROM room_members
+        WHERE room_id = ?
+        AND user_id = ?
+        """,
+        (
+            event["room_id"],
+            user_id
+        )
+    )
+
+    if member is None:
+        raise HTTPException(
+            status_code=403,
+            detail="not a room member"
+        )
+
+
     respond_to_event(
         event_id,
         user_id,
@@ -308,7 +342,6 @@ def respond_event(
         "going": count_confirmations(event_id)
     }
 
-
 print()
 print("YOU CAN NOT START THE SERVER WITH PYTHON")
 print("start with:")