eightball/PluralKit
1
0
Fork 0
mirror of https://github.com/PluralKit/PluralKit.git synced 2026-02-04 13:06:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix: check 'with_members' in /systems/:ref/groups against member list privacy

Browse source
This commit is contained in:
spiral 2021-11-19 10:18:12 -05:00
parent 0ca356eec3
commit 85c095a115
No known key found for this signature in database
GPG key ID: A6059F0CA0E1BD31
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
PluralKit.API/Controllers/v2/GroupControllerV2.cs
View file

@ -39,6 +39,9 @@ namespace PluralKit.API
.Select(g => g.ToJson(ctx, needsMembersArray: with_members))
.ToListAsync();
if (with_members && !system.MemberListPrivacy.CanAccess(ctx))
throw Errors.UnauthorizedMemberList;
if (with_members && j_groups.Count > 0)
{
var q = await _repo.GetGroupMemberInfo(await groups.Select(x => x.Id).ToListAsync());