Fixed bug where non-admins in multi user mode could change the settings if they could open the dialog

6 years ago · 3ebc903ce9
parent 21c5795f1c
commit 3ebc903ce9
1 changed files with 1 additions and 1 deletions
--- a/backend/app.js
+++ b/backend/app.js
@ -1892,7 +1892,7 @@ app.get('/api/config', function(req, res) {
    });
 });

-app.post('/api/setConfig', function(req, res) {
+app.post('/api/setConfig', optionalJwt, function(req, res) {
    let new_config_file = req.body.new_config_file;
    if (new_config_file && new_config_file['YoutubeDLMaterial']) {
        let success = config_api.setConfigFile(new_config_file);