cjones/immich
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

separate and implement album READ and WRITE permission

Browse Source
This commit is contained in:
mgabor
2024-04-12 11:10:22 +02:00
parent 156cfb5820
commit 48149e4384
7 changed files with 51 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/src/services/album.service.ts
View File

@@ -164,7 +164,7 @@ export class AlbumService {
async addAssets(auth: AuthDto, id: string, dto: BulkIdsDto): Promise<BulkIdResponseDto[]> {
const album = await this.findOrFail(id, { withAssets: false });
await this.access.requirePermission(auth, Permission.ALBUM_READ, id);
await this.access.requirePermission(auth, Permission.ALBUM_WRITE, id);
const results = await addAssets(
auth,
@@ -187,7 +187,7 @@ export class AlbumService {
async removeAssets(auth: AuthDto, id: string, dto: BulkIdsDto): Promise<BulkIdResponseDto[]> {
const album = await this.findOrFail(id, { withAssets: false });
await this.access.requirePermission(auth, Permission.ALBUM_READ, id);
await this.access.requirePermission(auth, Permission.ALBUM_WRITE, id);
const results = await removeAssets(
auth,