From 2949b4c86715d9eebfe5bf116c8df7f0a5875eb3 Mon Sep 17 00:00:00 2001 From: brian-doherty <76168809+brian-doherty@users.noreply.github.com> Date: Tue, 13 Feb 2024 16:30:34 -0600 Subject: [PATCH] fix(subsonic): fix getAvatar user request comparison (#469) --- server/ctrlsubsonic/handlers_raw.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/ctrlsubsonic/handlers_raw.go b/server/ctrlsubsonic/handlers_raw.go index e82131fb..b6bbeccc 100644 --- a/server/ctrlsubsonic/handlers_raw.go +++ b/server/ctrlsubsonic/handlers_raw.go @@ -242,7 +242,7 @@ func (c *Controller) ServeGetAvatar(w http.ResponseWriter, r *http.Request) *spe return spec.NewError(10, "please provide an `username` parameter") } reqUser := c.dbc.GetUserByName(username) - if (user != reqUser) && !user.IsAdmin { + if (user.ID != reqUser.ID) && !user.IsAdmin { return spec.NewError(50, "user not admin") } http.ServeContent(w, r, "", time.Now(), bytes.NewReader(reqUser.Avatar))