Mirrors/audiobookshelf
Mirrors/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-04-25 01:16:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix:Playlist API endpoint permissions

Browse Source
This commit is contained in:
advplyr 2022-11-28 16:29:04 -06:00
parent a2347150a2
commit d41366a417
1 changed files with 0 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
server/controllers/PlaylistController.js
View File

@ -187,14 +187,6 @@ class PlaylistController {
req.playlist = playlist
}
if (req.method == 'DELETE' && !req.user.canDelete) {
Logger.warn(`[PlaylistController] User attempted to delete without permission`, req.user.username)
return res.sendStatus(403)
} else if ((req.method == 'PATCH' || req.method == 'POST') && !req.user.canUpdate) {
Logger.warn('[PlaylistController] User attempted to update without permission', req.user.username)
return res.sendStatus(403)
}
next()
}
}