bot/src/bot_api/controller/auth_controller.py

@@ -86,6 +86,11 @@ class AuthController:
 
     @Route.post(f"{BasePath}/register-by-id/<id>")
     async def register_id(self, id: str):
+        if not FeatureFlagsSettings.get_flag_from_dict(
+            self._technician_config.feature_flags, FeatureFlagsEnum.basic_registration
+        ):
+            return
+
         result = await self._auth_service.confirm_email_async(id)
         return jsonify(result)
 

bot/src/bot_graphql/abc/query_abc.py

@@ -101,7 +101,9 @@ class QueryABC(ObjectType):
             element: Achievement = element
             for u in user.users:
                 u: User = u
-                if u.server.id == element.server.id:
+                guild = bot.get_guild(u.server.discord_id)
+                member = guild.get_member(u.discord_id)
+                if permissions.is_member_moderator(member) and u.server.id == element.server.id:
                     access = True
                     break