sourcehut
/
builds.sr.ht
mirror of https://git.sr.ht/~sircmpwn/builds.sr.ht
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

api/job_by_id_manifest_GET: fix user/token

This commit is contained in:
Drew DeVault 2023-12-09 19:23:30 +01:00
parent 63cbb67271
commit 431f7031bb
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
buildsrht/blueprints/api.py
View File

@ -129,7 +129,7 @@ def jobs_by_id_manifest_GET(job_id):
job = Job.query.filter(Job.id == job_id).first()
if not job:
abort(404)
if job.visibility == Visibility.PRIVATE and (current_user is None or job.owner_id != current_token.user_id):
if job.visibility == Visibility.PRIVATE and (current_token is None or job.owner_id != current_token.user_id):
abort(404) # TODO: ACLs
return Response(job.manifest, content_type="text/plain")