diff options
Diffstat (limited to 'server/src/routes/ui/node.rs')
-rw-r--r-- | server/src/routes/ui/node.rs | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/server/src/routes/ui/node.rs b/server/src/routes/ui/node.rs index c055953..4b3f861 100644 --- a/server/src/routes/ui/node.rs +++ b/server/src/routes/ui/node.rs @@ -255,6 +255,7 @@ impl DatabaseNodeUserDataExt for DataAcid { id.to_owned(), T_NODE .get(self, id)? + .only_if_permitted(&session.user.permissions) .ok_or(anyhow!("node does not exist: {id}"))? .public, T_USER_NODE |