fix: check for correct permission in TUS Delete

This commit is contained in:
Henrique Dias
2026-03-04 10:04:22 +01:00
parent 148b3c5942
commit 7ed1425115

View File

@@ -240,7 +240,7 @@ func tusPatchHandler(cache UploadCache) handleFunc {
func tusDeleteHandler(cache UploadCache) handleFunc { func tusDeleteHandler(cache UploadCache) handleFunc {
return withUser(func(_ http.ResponseWriter, r *http.Request, d *data) (int, error) { return withUser(func(_ http.ResponseWriter, r *http.Request, d *data) (int, error) {
if r.URL.Path == "/" || !d.user.Perm.Create { if r.URL.Path == "/" || !d.user.Perm.Delete {
return http.StatusForbidden, nil return http.StatusForbidden, nil
} }