Mirror/filesafe
1
0
Fork 0
mirror of https://github.com/BobbyWibowo/lolisafe.git synced 2025-01-19 01:31:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: delete album only worked for own albums

Browse Source
This commit is contained in:
Bobby 2022-05-05 14:30:41 +07:00
parent dbc0a82186
commit 30b8f0040c
No known key found for this signature in database
GPG Key ID: 941839794CBF5A09
1 changed files with 25 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
controllers/albumsController.js
View File

@ -246,16 +246,37 @@ self.disable = async (req, res, next) => {
const ismoderator = perms.is(user, 'moderator')
const id = req.body.id
const id = parseInt(req.body.id)
if (isNaN(id)) throw new ClientError('No album specified.')
const purge = req.body.purge
const del = ismoderator ? req.body.del : false
if (!Number.isFinite(id)) throw new ClientError('No album specified.')
const filter = function () {
this.where('id', id)
if (!ismoderator) {
this.andWhere({
enabled: 1,
userid: user.id
})
}
}
const album = await db.table('albums')
.where(filter)
.first()
if (!album) {
throw new ClientError('Could not get album with the specified ID.')
}
logger.inspect(album)
if (purge) {
const files = await db.table('files')
.where({
albumid: id,
userid: user.id
userid: album.userid
})
if (files.length) {
@ -266,16 +287,6 @@ self.disable = async (req, res, next) => {
utils.invalidateStatsCache('uploads')
}
const filter = {
id,
userid: user.id
}
const identifier = await db.table('albums')
.select('identifier')
.where(filter)
.first()
.then(row => row.identifier)
if (del) {
await db.table('albums')
.where(filter)
@ -291,7 +302,7 @@ self.disable = async (req, res, next) => {
utils.invalidateStatsCache('albums')
try {
await paths.unlink(path.join(paths.zips, `${identifier}.zip`))
await paths.unlink(path.join(paths.zips, `${album.identifier}.zip`))
} catch (error) {
// Re-throw non-ENOENT error
if (error.code !== 'ENOENT') throw error