fix: make perm.share depend on share.download

2026-03-14 08:31:55 +01:00
parent a63573b67e
commit 09a26166b4
2 changed files with 5 additions and 2 deletions
--- a/http/share.go
+++ b/http/share.go
@@ -20,7 +20,7 @@ import (

 func withPermShare(fn handleFunc) handleFunc {
 	return withUser(func(w http.ResponseWriter, r *http.Request, d *data) (int, error) {
-		if !d.user.Perm.Share {
+		if !d.user.Perm.Share || !d.user.Perm.Download {
 			return http.StatusForbidden, nil
 		}