From 7b59407b9ad2fd7df107ab7947fa3e952a4c4696 Mon Sep 17 00:00:00 2001 From: Kieran Date: Tue, 17 Oct 2023 21:42:54 +0100 Subject: [PATCH] Admin file actions --- VoidCat/Controllers/UploadController.cs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/VoidCat/Controllers/UploadController.cs b/VoidCat/Controllers/UploadController.cs index c2d4d67..faf07c5 100644 --- a/VoidCat/Controllers/UploadController.cs +++ b/VoidCat/Controllers/UploadController.cs @@ -222,7 +222,7 @@ namespace VoidCat.Controllers var uid = HttpContext.GetUserId(); var isOwner = uid.HasValue && await _userUploads.Uploader(fid) == uid; - var info = await _fileInfo.Get(fid, isOwner); + var info = await _fileInfo.Get(fid, isOwner || HttpContext.IsRole(Roles.Admin)); if (info == default) return StatusCode(404); return Json(info); @@ -339,7 +339,7 @@ namespace VoidCat.Controllers var gid = id.FromBase58Guid(); var meta = await _metadata.Get(gid); if (meta == default) return NotFound(); - if (!meta.CanEdit(fileMeta.EditSecret)) return Unauthorized(); + if (!(meta.CanEdit(fileMeta.EditSecret) || HttpContext.IsRole(Roles.Admin))) return Unauthorized(); await _metadata.Update(gid, new() {