Signed-off-by: Devanoux <ernst.devan@gmail.com>

@@ -5,3 +6,3 @@
 namespace KeepGrouped.API.Roles;
 
-public sealed class CreateRoleQuery(KeepGroupedDb db): IHandler
+public sealed class CreateRoleQuery(KeepGroupedDb db) : IHandler

@@ -19,0 +23,4 @@
+            return RoleProblems.RankingTooLow();
+        }
+
+        if (db_role.Name == "Member")

@@ -21,0 +36,4 @@
+        {
+            rl.Ranking--;
+            await db.SaveChangesAsync();
+        }

@@ -18,2 +18,3 @@
+        }
 
-		role.Permission = perm;
+        if (tk.User.Role.Ranking >= db_role.Ranking || ((int)tk.User.Role.Permission & Math.Abs(perm)) == 0)

@@ -0,0 +16,4 @@
+            return RoleProblems.OpNotFound(direction);
+        }
+
+        var op = direction == "up" ? -1 : +1;

@@ -8,3 +10,3 @@
     public static void MapLogoutUser(this IEndpointRouteBuilder auth)
     {
-        auth.MapDelete("/logout/{id}", [Authorize] async (LogoutQuery query, HttpContext http, string id) =>
+        auth.MapDelete("/logout/{id}", [Authorize][Roles(Perms.HandleUsers)] async (LogoutQuery query, HttpContext http, string id) =>