From 730353601db9818d148c85bfe1ecb119abaab7cc Mon Sep 17 00:00:00 2001
From: metamuffin <metamuffin@disroot.org>
Date: Sat, 20 Jan 2024 12:13:20 +0100
Subject: cleanup yesterdays mess

---
 server/src/routes/ui/node.rs | 1 +
 1 file changed, 1 insertion(+)

(limited to 'server/src/routes/ui/node.rs')

diff --git a/server/src/routes/ui/node.rs b/server/src/routes/ui/node.rs
index c055953..4b3f861 100644
--- a/server/src/routes/ui/node.rs
+++ b/server/src/routes/ui/node.rs
@@ -255,6 +255,7 @@ impl DatabaseNodeUserDataExt for DataAcid {
             id.to_owned(),
             T_NODE
                 .get(self, id)?
+                .only_if_permitted(&session.user.permissions)
                 .ok_or(anyhow!("node does not exist: {id}"))?
                 .public,
             T_USER_NODE
-- 
cgit v1.2.3-70-g09d2