fix: check for correct permission in TUS Delete
This commit is contained in:
@@ -240,7 +240,7 @@ func tusPatchHandler(cache UploadCache) handleFunc {
|
||||
|
||||
func tusDeleteHandler(cache UploadCache) handleFunc {
|
||||
return withUser(func(_ http.ResponseWriter, r *http.Request, d *data) (int, error) {
|
||||
if r.URL.Path == "/" || !d.user.Perm.Create {
|
||||
if r.URL.Path == "/" || !d.user.Perm.Delete {
|
||||
return http.StatusForbidden, nil
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user