From 68f06f75624599e9cb59bd5fdd7fd8e6f193022e Mon Sep 17 00:00:00 2001
From: Julian Rother <julianr@fsmpi.rwth-aachen.de>
Date: Wed, 15 Feb 2017 18:19:11 +0100
Subject: [PATCH] Fixed permission query in auth handler, closes #218
---
server.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/server.py b/server.py
index 358e549..19b5f49 100644
--- a/server.py
+++ b/server.py
@@ -524,7 +524,7 @@ def auth(): # For use with nginx auth_request
JOIN courses ON (lectures.course_id = courses.id)
LEFT JOIN perm ON (videos.id = perm.video_id OR lectures.id = perm.lecture_id OR courses.id = perm.course_id)
WHERE videos.path = ?
- AND (courses.visible AND lectures.visible AND videos.visible)
+ AND (courses.visible AND lectures.visible AND videos.visible AND NOT perm.deleted)
ORDER BY perm.video_id DESC, perm.lecture_id DESC, perm.course_id DESC''',
url)
if not perms:
--
GitLab