From b681c1e840fd2f33197bc48ecf220adf32ca158c Mon Sep 17 00:00:00 2001 From: undefined Date: Fri, 17 Mar 2023 21:51:21 +0800 Subject: [PATCH] core: fsdownload: remove access denied logic --- packages/hydrooj/src/handler/misc.ts | 3 --- 1 file changed, 3 deletions(-) diff --git a/packages/hydrooj/src/handler/misc.ts b/packages/hydrooj/src/handler/misc.ts index f276a31fb..9d61e64d4 100644 --- a/packages/hydrooj/src/handler/misc.ts +++ b/packages/hydrooj/src/handler/misc.ts @@ -84,9 +84,6 @@ export class FSDownloadHandler extends Handler { @param('filename', Types.Filename) @param('noDisposition', Types.Boolean) async get(domainId: string, uid: number, filename: string, noDisposition = false) { - const targetUser = await user.getById('system', uid); - if (!targetUser) throw new NotFoundError(uid); - if (this.user._id !== uid && !targetUser.hasPriv(PRIV.PRIV_CREATE_FILE)) throw new AccessDeniedError(); this.response.addHeader('Cache-Control', 'public'); const target = `user/${uid}/${filename}`; const file = await storage.getMeta(target);