Require elevated auth to upload subtitles

4 years ago · 5f998bdd1f
parent 9970b87439
commit 5f998bdd1f
1 changed files with 1 additions and 0 deletions
--- a/Jellyfin.Api/Controllers/SubtitleController.cs
+++ b/Jellyfin.Api/Controllers/SubtitleController.cs
@ -371,6 +371,7 @@ namespace Jellyfin.Api.Controllers
        /// <response code="204">Subtitle uploaded.</response>
        /// <returns>A <see cref="NoContentResult"/>.</returns>
        [HttpPost("Videos/{itemId}/Subtitles")]
+        [Authorize(Policy = Policies.RequiresElevation)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        public async Task<ActionResult> UploadSubtitle(
            [FromRoute, Required] Guid itemId,