fix(subsonic): fix getAvatar user request comparison (#469)

sentriz · Feb 13, 2024 · 2949b4c · 2949b4c
1 parent 19ebd45
commit 2949b4c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/ctrlsubsonic/handlers_raw.go b/server/ctrlsubsonic/handlers_raw.go
@@ -242,7 +242,7 @@ func (c *Controller) ServeGetAvatar(w http.ResponseWriter, r *http.Request) *spe
 		return spec.NewError(10, "please provide an `username` parameter")
 	}
 	reqUser := c.dbc.GetUserByName(username)
-	if (user != reqUser) && !user.IsAdmin {
+	if (user.ID != reqUser.ID) && !user.IsAdmin {
 		return spec.NewError(50, "user not admin")
 	}
 	http.ServeContent(w, r, "", time.Now(), bytes.NewReader(reqUser.Avatar))