gitea-mirror/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2026-08-02 08:58:46 -07:00
Code Issues Packages Projects Releases Wiki Activity

fix: timebuckets locked permissions (#30066)

Browse Source
This commit is contained in:
Daniel Dietzler
2026-07-20 20:07:56 -04:00
committed by GitHub
parent 6fa3f2feac
commit 4c754f2999
2 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/src/services/timeline.service.ts
+3
View File
@@ -60,6 +60,9 @@ export class TimelineService extends BaseService {
if (dto.visibility === AssetVisibility.Archive) {
await this.requireAccess({ auth, permission: Permission.ArchiveRead, ids: [dto.userId] });
}
if (dto.visibility === AssetVisibility.Locked && dto.userId !== auth.user.id) {
throw new BadRequestException("You may not access another user's locked timeline");
}
}
if (dto.tagId) {