X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server%2Fcontrollers%2Fapi%2Fvideo-channel.ts;h=b2916278752aee9095a78514f180011aadab33de;hb=43df00a30dc07ec6fc1b30d41eac011e4ea8641b;hp=f9c1a405d907038ca81ef7e5e9d8102a85b7af3d;hpb=2760b454a761f6af3138b2fb5f34340772ab0d1e;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/controllers/api/video-channel.ts b/server/controllers/api/video-channel.ts index f9c1a405d..b29162787 100644 --- a/server/controllers/api/video-channel.ts +++ b/server/controllers/api/video-channel.ts @@ -24,6 +24,7 @@ import { asyncRetryTransactionMiddleware, authenticate, commonVideosFiltersValidator, + ensureUserCanManageChannel, optionalAuthenticate, paginationValidator, setDefaultPagination, @@ -74,7 +75,7 @@ videoChannelRouter.post('/:nameWithHost/avatar/pick', authenticate, reqAvatarFile, asyncMiddleware(videoChannelsNameWithHostValidator), - ensureAuthUserOwnsChannelValidator, + ensureUserCanManageChannel, updateAvatarValidator, asyncMiddleware(updateVideoChannelAvatar) ) @@ -83,7 +84,7 @@ videoChannelRouter.post('/:nameWithHost/banner/pick', authenticate, reqBannerFile, asyncMiddleware(videoChannelsNameWithHostValidator), - ensureAuthUserOwnsChannelValidator, + ensureUserCanManageChannel, updateBannerValidator, asyncMiddleware(updateVideoChannelBanner) ) @@ -91,21 +92,21 @@ videoChannelRouter.post('/:nameWithHost/banner/pick', videoChannelRouter.delete('/:nameWithHost/avatar', authenticate, asyncMiddleware(videoChannelsNameWithHostValidator), - ensureAuthUserOwnsChannelValidator, + ensureUserCanManageChannel, asyncMiddleware(deleteVideoChannelAvatar) ) videoChannelRouter.delete('/:nameWithHost/banner', authenticate, asyncMiddleware(videoChannelsNameWithHostValidator), - ensureAuthUserOwnsChannelValidator, + ensureUserCanManageChannel, asyncMiddleware(deleteVideoChannelBanner) ) videoChannelRouter.put('/:nameWithHost', authenticate, asyncMiddleware(videoChannelsNameWithHostValidator), - ensureAuthUserOwnsChannelValidator, + ensureUserCanManageChannel, videoChannelsUpdateValidator, asyncRetryTransactionMiddleware(updateVideoChannel) ) @@ -347,7 +348,6 @@ async function listVideoChannelVideos (req: express.Request, res: express.Respon displayOnlyForFollower, nsfw: buildNSFWFilter(res, query.nsfw), - withFiles: false, videoChannelId: videoChannelInstance.id, user: res.locals.oauth ? res.locals.oauth.token.User : undefined, countVideos