From 2f32edf77fe61198afb2999415d4afa4e1b08bbf Mon Sep 17 00:00:00 2001
From: Gronod <gordon@i3omb.com>
Date: Fri, 29 May 2026 13:05:21 +0100
Subject: [PATCH] fix: restrict arrInstanceKey to admin users in
 buildArrDownload (#73)

---
 server/services/DownloadMatcher.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/services/DownloadMatcher.js b/server/services/DownloadMatcher.js
index 28eb0d2..43b5d34 100644
--- a/server/services/DownloadMatcher.js
+++ b/server/services/DownloadMatcher.js
@@ -122,7 +122,6 @@ function buildArrDownload(record, context, options = {}) {
   dlObj.arrQueueId = record.id;
   dlObj.arrType = isSeries ? 'sonarr' : 'radarr';
   dlObj.arrInstanceUrl = record._instanceUrl || null;
-  dlObj.arrInstanceKey = record._instanceKey || null;
   dlObj.arrContentId = record.episodeId || record.movieId || null;
   dlObj.arrContentIds = record.episodeIds || null;
   dlObj.arrSeriesId = record.seriesId || null;
@@ -134,6 +133,7 @@ function buildArrDownload(record, context, options = {}) {
   if (isAdmin) {
     dlObj.downloadPath = options.downloadPath || null;
     dlObj.targetPath = media.path || null;
+    dlObj.arrInstanceKey = record._instanceKey || null;
     dlObj.arrLink = isSeries 
       ? DownloadAssembler.getSonarrLink(media)
       : DownloadAssembler.getRadarrLink(media);