Mirrors/audiobookshelf
Mirrors/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-01-22 00:07:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix:Get library check user access

Browse Source
This commit is contained in:
advplyr 2022-01-16 13:37:32 -06:00
parent 8442a629fb
commit 156a4ed01d
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
server/controllers/LibraryController.js
View File

@ -38,6 +38,12 @@ class LibraryController {
} }
async findOne(req, res) { async findOne(req, res) {
var librariesAccessible = req.user.librariesAccessible || []
if (librariesAccessible && librariesAccessible.length && !librariesAccessible.includes(req.library.id)) {
Logger.warn(`[LibraryController] Library ${req.library.id} not accessible to user ${req.user.username}`)
return res.sendStatus(404)
}
if (req.query.include && req.query.include === 'filterdata') { if (req.query.include && req.query.include === 'filterdata') {
var books = this.db.audiobooks.filter(ab => ab.libraryId === req.library.id) var books = this.db.audiobooks.filter(ab => ab.libraryId === req.library.id)
return res.json({ return res.json({