nonshy/website
nonshy/website
1
0
Fork 0
Code Issues 20 Pull Requests 1 Packages Projects Releases Wiki Activity

Bugfix: Owner of a private photo can see its comment page

Browse Source
This commit is contained in:
Noah Petherbridge 2023-05-16 10:10:37 -07:00
parent ba9e90b32a
commit 17d9760b61
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/controller/photo/view.go
View File

@ -68,7 +68,7 @@ func View() http.HandlerFunc {
// Is this a private photo and are we allowed to see? // Is this a private photo and are we allowed to see?
isGranted := models.IsPrivateUnlocked(user.ID, currentUser.ID) isGranted := models.IsPrivateUnlocked(user.ID, currentUser.ID)
if photo.Visibility == models.PhotoPrivate && !isGranted && !currentUser.IsAdmin { if photo.Visibility == models.PhotoPrivate && !isGranted && !isOwnPhoto && !currentUser.IsAdmin {
templates.NotFoundPage(w, r) templates.NotFoundPage(w, r)
return return
} }