fix: restrict arrInstanceKey to admin users in buildArrDownload (#73)
Build and Push Docker Image / build (push) Successful in 1m2s
Licence Check / Licence compatibility and copyright header verification (push) Successful in 1m56s
CI / Security audit (push) Successful in 2m19s
CI / Swagger Validation & Coverage (push) Successful in 2m29s
CI / Tests & coverage (push) Successful in 3m7s

This commit is contained in:
2026-05-29 13:05:21 +01:00
parent 0364a3c824
commit 2f32edf77f
+1 -1
View File
@@ -122,7 +122,6 @@ function buildArrDownload(record, context, options = {}) {
dlObj.arrQueueId = record.id;
dlObj.arrType = isSeries ? 'sonarr' : 'radarr';
dlObj.arrInstanceUrl = record._instanceUrl || null;
dlObj.arrInstanceKey = record._instanceKey || null;
dlObj.arrContentId = record.episodeId || record.movieId || null;
dlObj.arrContentIds = record.episodeIds || null;
dlObj.arrSeriesId = record.seriesId || null;
@@ -134,6 +133,7 @@ function buildArrDownload(record, context, options = {}) {
if (isAdmin) {
dlObj.downloadPath = options.downloadPath || null;
dlObj.targetPath = media.path || null;
dlObj.arrInstanceKey = record._instanceKey || null;
dlObj.arrLink = isSeries
? DownloadAssembler.getSonarrLink(media)
: DownloadAssembler.getRadarrLink(media);