open-source-mirrors
/
overseerr
mirror of https://github.com/sct/overseerr
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix(api): check correct permissions for auto approve when requests are created

Browse Source
pull/1136/head
sct 4 years ago
parent 3384eb1c47
commit 3c1a72b038
1 changed files with 50 additions and 45 deletions
Show Stats Download Patch File Download Diff File

65
server/routes/request.ts
Unescape View File

@ -211,29 +211,31 @@ requestRoutes.post(
media, media,
requestedBy: requestUser, requestedBy: requestUser,
// If the user is an admin or has the "auto approve" permission, automatically approve the request // If the user is an admin or has the "auto approve" permission, automatically approve the request
status: status: req.user?.hasPermission(
req.user?.hasPermission( [
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K ? Permission.AUTO_APPROVE_4K
: Permission.AUTO_APPROVE : Permission.AUTO_APPROVE,
) ||
req.user?.hasPermission(
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K_MOVIE ? Permission.AUTO_APPROVE_4K_MOVIE
: Permission.AUTO_APPROVE_MOVIE : Permission.AUTO_APPROVE_MOVIE,
Permission.MANAGE_REQUESTS,
],
{ type: 'or' }
) )
? MediaRequestStatus.APPROVED ? MediaRequestStatus.APPROVED
: MediaRequestStatus.PENDING, : MediaRequestStatus.PENDING,
modifiedBy: modifiedBy: req.user?.hasPermission(
req.user?.hasPermission( [
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K ? Permission.AUTO_APPROVE_4K
: Permission.AUTO_APPROVE : Permission.AUTO_APPROVE,
) ||
req.user?.hasPermission(
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K_MOVIE ? Permission.AUTO_APPROVE_4K_MOVIE
: Permission.AUTO_APPROVE_MOVIE : Permission.AUTO_APPROVE_MOVIE,
Permission.MANAGE_REQUESTS,
],
{ type: 'or' }
) )
? req.user ? req.user
: undefined, : undefined,
@ -286,29 +288,31 @@ requestRoutes.post(
media, media,
requestedBy: requestUser, requestedBy: requestUser,
// If the user is an admin or has the "auto approve" permission, automatically approve the request // If the user is an admin or has the "auto approve" permission, automatically approve the request
status: status: req.user?.hasPermission(
req.user?.hasPermission( [
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K ? Permission.AUTO_APPROVE_4K
: Permission.AUTO_APPROVE : Permission.AUTO_APPROVE,
) ||
req.user?.hasPermission(
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K_TV ? Permission.AUTO_APPROVE_4K_TV
: Permission.AUTO_APPROVE_TV : Permission.AUTO_APPROVE_TV,
Permission.MANAGE_REQUESTS,
],
{ type: 'or' }
) )
? MediaRequestStatus.APPROVED ? MediaRequestStatus.APPROVED
: MediaRequestStatus.PENDING, : MediaRequestStatus.PENDING,
modifiedBy: modifiedBy: req.user?.hasPermission(
req.user?.hasPermission( [
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K ? Permission.AUTO_APPROVE_4K
: Permission.AUTO_APPROVE : Permission.AUTO_APPROVE,
) ||
req.user?.hasPermission(
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K_TV ? Permission.AUTO_APPROVE_4K_TV
: Permission.AUTO_APPROVE_TV : Permission.AUTO_APPROVE_TV,
Permission.MANAGE_REQUESTS,
],
{ type: 'or' }
) )
? req.user ? req.user
: undefined, : undefined,
@ -321,16 +325,17 @@ requestRoutes.post(
(sn) => (sn) =>
new SeasonRequest({ new SeasonRequest({
seasonNumber: sn, seasonNumber: sn,
status: status: req.user?.hasPermission(
req.user?.hasPermission( [
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K ? Permission.AUTO_APPROVE_4K
: Permission.AUTO_APPROVE : Permission.AUTO_APPROVE,
) ||
req.user?.hasPermission(
req.body.is4k req.body.is4k
? Permission.AUTO_APPROVE_4K_TV ? Permission.AUTO_APPROVE_4K_TV
: Permission.AUTO_APPROVE_TV : Permission.AUTO_APPROVE_TV,
Permission.MANAGE_REQUESTS,
],
{ type: 'or' }
) )
? MediaRequestStatus.APPROVED ? MediaRequestStatus.APPROVED
: MediaRequestStatus.PENDING, : MediaRequestStatus.PENDING,

Write Preview
Loading…
Cancel
Save