diff options
Diffstat (limited to 'server/middlewares/validators')
| -rw-r--r-- | server/middlewares/validators/videos.js | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/server/middlewares/validators/videos.js b/server/middlewares/validators/videos.js index 9d21ee16f..e51087d5a 100644 --- a/server/middlewares/validators/videos.js +++ b/server/middlewares/validators/videos.js | |||
| @@ -77,6 +77,7 @@ function videosRemove (req, res, next) { | |||
| 77 | 77 | ||
| 78 | if (!video) return res.status(404).send('Video not found') | 78 | if (!video) return res.status(404).send('Video not found') |
| 79 | else if (video.isOwned() === false) return res.status(403).send('Cannot remove video of another pod') | 79 | else if (video.isOwned() === false) return res.status(403).send('Cannot remove video of another pod') |
| 80 | else if (video.author !== res.locals.oauth.token.user.username) return res.status(403).send('Cannot remove video of another user') | ||
| 80 | 81 | ||
| 81 | next() | 82 | next() |
| 82 | }) | 83 | }) |