Backupppert/jellyfin
0
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin.git synced 2024-07-05 21:33:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix media folders endpoint access control

Browse source
This commit is contained in:
Bill Thornton 2022-11-09 18:31:30 -05:00
parent fb9023f2d8
commit 9f352ccb5b
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Jellyfin.Api/Controllers/LibraryController.cs
View file

@ -491,6 +491,12 @@ namespace Jellyfin.Api.Controllers
{
var items = _libraryManager.GetUserRootFolder().Children.Concat(_libraryManager.RootFolder.VirtualChildren).OrderBy(i => i.SortName).ToList();
if (!User.GetIsApiKey() && !User.IsInRole(UserRoles.Administrator))
{
var user = _userManager.GetUserById(User.GetUserId());
items = items.Where(i => i.IsVisible(user)).ToList();
}
if (isHidden.HasValue)
{
var val = isHidden.Value;