From 7ed1425115be602c2b23236c410098ea2d74b42f Mon Sep 17 00:00:00 2001 From: Henrique Dias Date: Wed, 4 Mar 2026 10:04:22 +0100 Subject: [PATCH] fix: check for correct permission in TUS Delete --- http/tus_handlers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/http/tus_handlers.go b/http/tus_handlers.go index b659d479..68931f5d 100644 --- a/http/tus_handlers.go +++ b/http/tus_handlers.go @@ -240,7 +240,7 @@ func tusPatchHandler(cache UploadCache) handleFunc { func tusDeleteHandler(cache UploadCache) handleFunc { return withUser(func(_ http.ResponseWriter, r *http.Request, d *data) (int, error) { - if r.URL.Path == "/" || !d.user.Perm.Create { + if r.URL.Path == "/" || !d.user.Perm.Delete { return http.StatusForbidden, nil }