fix: don't ask to login on a web-page with no list permission
Massimo Melina committed
Jun 6, 2024 at 15:38 UTC
1d3fe9a1967470f4e2ea2a4623c3d40080558236
1 file changed
+2
-2
src/api.get_file_list.ts
+2
-2
@@ -23,12 +23,12 @@ export const get_file_list: ApiHandler = async ({ uri='/', offset, limit, search
23
if (!node)
24
return fail(HTTP_NOT_FOUND)
25
admin &&= ctxAdminAccess(ctx) // validate 'admin' flag
26
- if (!admin && statusCodeForMissingPerm(node, 'can_list', ctx))
27
- return fail()
26
if (dirTraversal(search))
27
return fail(HTTP_FOOL)
28
if (await hasDefaultFile(node) || !await nodeIsDirectory(node))
29
return fail(HTTP_METHOD_NOT_ALLOWED)
30
+ if (!admin && statusCodeForMissingPerm(node, 'can_list', ctx))
31
+ return fail()
32
offset = Number(offset)
33
limit = Number(limit)
34
const filter = pattern2filter(String(search || ''))