github-mirrors/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2026-03-26 03:28:59 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(server): require asset permission when creating an album with them (#8686)

Browse Source 
require asset permission when creating an album with them
This commit is contained in:
Daniel Dietzler
2024-04-10 19:41:22 +02:00
committed by GitHub
parent 56079527ef
commit ad5d115abe
3 changed files with 41 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
server/src/services/album.service.ts
View File

@@ -119,13 +119,16 @@ export class AlbumService {
}
}
const allowedAssetIdsSet = await this.access.checkAccess(auth, Permission.ASSET_SHARE, new Set(dto.assetIds));
const assets = [...allowedAssetIdsSet].map((id) => ({ id }) as AssetEntity);
const album = await this.albumRepository.create({
ownerId: auth.user.id,
albumName: dto.albumName,
description: dto.description,
sharedUsers: dto.sharedWithUserIds?.map((value) => ({ id: value }) as UserEntity) ?? [],
assets: (dto.assetIds || []).map((id) => ({ id }) as AssetEntity),
albumThumbnailAssetId: dto.assetIds?.[0] || null,
assets,
albumThumbnailAssetId: assets[0]?.id || null,
});
return mapAlbumWithAssets(album);