Merge pull request #4997 from crobibero/subtitle-upload-auth

Require elevated auth to upload subtitles
2021-01-10 20:45:15 +01:00 · 2021-01-10 20:45:15 +01:00 · 5c00b4175a
commit 5c00b4175a
parent 9970b87439 5f998bdd1f
1 changed files with 1 additions and 0 deletions
--- a/Jellyfin.Api/Controllers/SubtitleController.cs
+++ b/Jellyfin.Api/Controllers/SubtitleController.cs
@ -371,6 +371,7 @@ namespace Jellyfin.Api.Controllers
        /// <response code="204">Subtitle uploaded.</response>
        /// <returns>A <see cref="NoContentResult"/>.</returns>
        [HttpPost("Videos/{itemId}/Subtitles")]
+        [Authorize(Policy = Policies.RequiresElevation)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        public async Task<ActionResult> UploadSubtitle(
            [FromRoute, Required] Guid itemId,