mirror/advplyr.audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-07-09 08:55:04 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fix:Playlist API endpoint permissions

Browse source
This commit is contained in:
advplyr 2022-11-28 16:29:04 -06:00
parent a2347150a2
commit d41366a417
1 changed files with 0 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
server/controllers/PlaylistController.js
View file

@ -187,14 +187,6 @@ class PlaylistController {
req.playlist = playlist
}
if (req.method == 'DELETE' && !req.user.canDelete) {
Logger.warn(`[PlaylistController] User attempted to delete without permission`, req.user.username)
return res.sendStatus(403)
} else if ((req.method == 'PATCH' || req.method == 'POST') && !req.user.canUpdate) {
Logger.warn('[PlaylistController] User attempted to update without permission', req.user.username)
return res.sendStatus(403)
}
next()
}
}