heimoshuiyu/gonic
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix(subsonic): fix getAvatar user request comparison (#469)

Browse Source
This commit is contained in:
brian-doherty
2024-02-13 16:30:34 -06:00
committed by GitHub
parent 19ebd4540f
commit 2949b4c867
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/ctrlsubsonic/handlers_raw.go
View File

@@ -242,7 +242,7 @@ func (c *Controller) ServeGetAvatar(w http.ResponseWriter, r *http.Request) *spe
return spec.NewError(10, "please provide an `username` parameter") return spec.NewError(10, "please provide an `username` parameter")
} }
reqUser := c.dbc.GetUserByName(username) reqUser := c.dbc.GetUserByName(username)
if (user != reqUser) && !user.IsAdmin { if (user.ID != reqUser.ID) && !user.IsAdmin {
return spec.NewError(50, "user not admin") return spec.NewError(50, "user not admin")
} }
http.ServeContent(w, r, "", time.Now(), bytes.NewReader(reqUser.Avatar)) http.ServeContent(w, r, "", time.Now(), bytes.NewReader(reqUser.Avatar))