From bf001f96d6f420d9818c806bb3e6358dc81b1f3e Mon Sep 17 00:00:00 2001
From: Ginger <ginger@gingershaped.computer>
Date: Sat, 7 Mar 2026 13:44:33 -0500
Subject: [PATCH] feat: Restrict reset token command

---
 src/admin/user/commands.rs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/admin/user/commands.rs b/src/admin/user/commands.rs
index 5e03cdb7..9950b1ce 100644
--- a/src/admin/user/commands.rs
+++ b/src/admin/user/commands.rs
@@ -300,6 +300,8 @@ pub(super) async fn reset_password(
 pub(super) async fn issue_password_reset_link(&self, username: String) -> Result {
 	use conduwuit_service::password_reset::{PASSWORD_RESET_PATH, RESET_TOKEN_QUERY_PARAM};
 
+	self.bail_restricted()?;
+
 	let mut reset_url = self
 		.services
 		.config