Restrict item refreshing to administrators

3 years ago · d659b9b9ab
parent 6bb50d5728
commit d659b9b9ab
1 changed files with 1 additions and 1 deletions
--- a/Jellyfin.Api/Controllers/ItemRefreshController.cs
+++ b/Jellyfin.Api/Controllers/ItemRefreshController.cs
@ -15,7 +15,7 @@ namespace Jellyfin.Api.Controllers
    /// Item Refresh Controller.
    /// </summary>
    [Route("Items")]
-    [Authorize(Policy = Policies.DefaultAuthorization)]
+    [Authorize(Policy = Policies.RequiresElevation)]
    public class ItemRefreshController : BaseJellyfinApiController
    {
        private readonly ILibraryManager _libraryManager;