From 17cc996288ea3dc7643904238e32a95b51058ec0 Mon Sep 17 00:00:00 2001
From: syuilo <syuilotan@yahoo.co.jp>
Date: Sun, 15 Nov 2020 17:32:29 +0900
Subject: 他人のpublicなクリップを取得できない問題を修正
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/server/api/endpoints/clips/show.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'src/server/api/endpoints/clips/show.ts')

diff --git a/src/server/api/endpoints/clips/show.ts b/src/server/api/endpoints/clips/show.ts
index 5b2b7b7d5e..1d4947528a 100644
--- a/src/server/api/endpoints/clips/show.ts
+++ b/src/server/api/endpoints/clips/show.ts
@@ -30,12 +30,15 @@ export default define(meta, async (ps, me) => {
 	// Fetch the clip
 	const clip = await Clips.findOne({
 		id: ps.clipId,
-		userId: me.id,
 	});
 
 	if (clip == null) {
 		throw new ApiError(meta.errors.noSuchClip);
 	}
 
+	if (!clip.isPublic && (clip.userId !== me.id)) {
+		throw new ApiError(meta.errors.noSuchClip);
+	}
+
 	return await Clips.pack(clip);
 });
-- 
cgit v1.2.3-freya