~comcloudway/builds.sr.ht

431f7031bbaf70be5cd52479412d44a4f56a3aa0 — Drew DeVault 11 months ago 63cbb67
api/job_by_id_manifest_GET: fix user/token
1 files changed, 1 insertions(+), 1 deletions(-)

M buildsrht/blueprints/api.py
M buildsrht/blueprints/api.py => buildsrht/blueprints/api.py +1 -1
@@ 129,7 129,7 @@ def jobs_by_id_manifest_GET(job_id):
    job = Job.query.filter(Job.id == job_id).first()
    if not job:
        abort(404)
    if job.visibility == Visibility.PRIVATE and (current_user is None or job.owner_id != current_token.user_id):
    if job.visibility == Visibility.PRIVATE and (current_token is None or job.owner_id != current_token.user_id):
        abort(404) # TODO: ACLs
    return Response(job.manifest, content_type="text/plain")