diff options
Diffstat (limited to 'src/server/api/endpoints/clips/notes.ts')
| -rw-r--r-- | src/server/api/endpoints/clips/notes.ts | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/server/api/endpoints/clips/notes.ts b/src/server/api/endpoints/clips/notes.ts index 5289533a1e..3d66623d63 100644 --- a/src/server/api/endpoints/clips/notes.ts +++ b/src/server/api/endpoints/clips/notes.ts @@ -45,13 +45,16 @@ export const meta = { export default define(meta, async (ps, user) => { const clip = await Clips.findOne({ id: ps.clipId, - userId: user.id }); if (clip == null) { throw new ApiError(meta.errors.noSuchClip); } + if (!clip.isPublic && (clip.userId !== user.id)) { + throw new ApiError(meta.errors.noSuchClip); + } + const clipQuery = ClipNotes.createQueryBuilder('joining') .select('joining.noteId') .where('joining.clipId = :clipId', { clipId: clip.id }); |