Deluan
435fb0b076
Allow administrators to disable playlist cover art upload/removal for non-admin users via the new EnableCoverArtUpload config option (default: true). - Guard uploadPlaylistImage and deletePlaylistImage endpoints (403 for non-admin when disabled) - Set CoverArtRole in Subsonic GetUser/GetUsers responses based on config and admin status - Pass config to frontend and conditionally hide upload/remove UI controls - Admins always retain upload capability regardless of setting
65 lines
1.9 KiB
Go
65 lines
1.9 KiB
Go
package subsonic
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/navidrome/navidrome/conf"
|
|
"github.com/navidrome/navidrome/model"
|
|
"github.com/navidrome/navidrome/model/request"
|
|
"github.com/navidrome/navidrome/server/subsonic/responses"
|
|
"github.com/navidrome/navidrome/utils/req"
|
|
"github.com/navidrome/navidrome/utils/slice"
|
|
)
|
|
|
|
// buildUserResponse creates a User response object from a User model
|
|
func buildUserResponse(user model.User) responses.User {
|
|
userResponse := responses.User{
|
|
Username: user.UserName,
|
|
AdminRole: user.IsAdmin,
|
|
Email: user.Email,
|
|
StreamRole: true,
|
|
ScrobblingEnabled: true,
|
|
DownloadRole: conf.Server.EnableDownloads,
|
|
ShareRole: conf.Server.EnableSharing,
|
|
CoverArtRole: conf.Server.EnableCoverArtUpload || user.IsAdmin,
|
|
Folder: slice.Map(user.Libraries, func(lib model.Library) int32 { return int32(lib.ID) }),
|
|
}
|
|
|
|
if conf.Server.Jukebox.Enabled {
|
|
userResponse.JukeboxRole = !conf.Server.Jukebox.AdminOnly || user.IsAdmin
|
|
}
|
|
|
|
return userResponse
|
|
}
|
|
|
|
func (api *Router) GetUser(r *http.Request) (*responses.Subsonic, error) {
|
|
loggedUser, ok := request.UserFrom(r.Context())
|
|
if !ok {
|
|
return nil, newError(responses.ErrorGeneric, "Internal error")
|
|
}
|
|
username, err := req.Params(r).String("username")
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if !strings.EqualFold(username, loggedUser.UserName) {
|
|
return nil, newError(responses.ErrorAuthorizationFail)
|
|
}
|
|
response := newResponse()
|
|
user := buildUserResponse(loggedUser)
|
|
response.User = &user
|
|
return response, nil
|
|
}
|
|
|
|
func (api *Router) GetUsers(r *http.Request) (*responses.Subsonic, error) {
|
|
loggedUser, ok := request.UserFrom(r.Context())
|
|
if !ok {
|
|
return nil, newError(responses.ErrorGeneric, "Internal error")
|
|
}
|
|
|
|
user := buildUserResponse(loggedUser)
|
|
response := newResponse()
|
|
response.Users = &responses.Users{User: []responses.User{user}}
|
|
return response, nil
|
|
}
|