Skip loading owner of character for API.

src/db.rs

@@ -42,9 +42,6 @@ pub(crate) trait Dao {
     async fn update_character_sheet<'a>(&self, character: &'a Character) -> sqlx::Result<()>;
 }
 
-//TODO is:
-// - use compile time queries
-// - find replacement for diesel migrations
 #[rocket::async_trait]
 impl Dao for SqlitePool {
     async fn load_user_by_id(&self, user_id: i32) -> sqlx::Result<Option<User>> {

src/routes/api.rs

@@ -30,13 +30,13 @@ async fn load_character(
     character_id: i32,
 ) -> Result<Character, Error> {
     let logged_in_user = logged_in_user.ok_or(Error::NotLoggedIn)?;
-    let owner = conn.load_user(&owner).await?.ok_or(Error::NotFound)?;
+
     let character: Character = conn
         .load_character(character_id)
         .await?
         .ok_or(Error::NotFound)?;
 
-    if logged_in_user != &owner {
+    if logged_in_user.username != owner {
         return Err(Error::NoPermission);
     }