Weishen/Hydro
2
0 Fork 0
mirror of https://gitcode.com/gh_mirrors/hy/Hydro.git synced 2026-10-18 09:36:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

core: update download file perm control

Browse Source
This commit is contained in:
undefined committed 2022-05-16 14:07:34 +08:00
1 parent e3d61924ef
commit f6cc2a72ff
2 files changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

packages/hydrooj/package.json
+1 -1
View File
@@ -1,6 +1,6 @@
{ {
"name": "hydrooj", "name": "hydrooj",
"version": "3.13.7", "version": "3.13.8",
"bin": "bin/hydrooj.js", "bin": "bin/hydrooj.js",
"main": "src/loader", "main": "src/loader",
"module": "src/loader", "module": "src/loader",
packages/hydrooj/src/handler/misc.ts
+1 -1
View File
@@ -91,7 +91,7 @@ export class FSDownloadHandler extends Handler {
@param('noDisposition', Types.Boolean) @param('noDisposition', Types.Boolean)
async get(domainId: string, uid: number, filename: string, noDisposition = false) { async get(domainId: string, uid: number, filename: string, noDisposition = false) {
const targetUser = await user.getById('system', uid); const targetUser = await user.getById('system', uid);
if (!targetUser.hasPriv(PRIV.PRIV_CREATE_FILE)) throw new ForbiddenError('Access denied'); if (this.user._id !== uid && !targetUser.hasPriv(PRIV.PRIV_CREATE_FILE)) throw new ForbiddenError('Access denied');
this.response.addHeader('Cache-Control', 'public'); this.response.addHeader('Cache-Control', 'public');
const target = `user/${uid}/${filename}`; const target = `user/${uid}/${filename}`;
const file = await storage.getMeta(target); const file = await storage.getMeta(target);