From: Jaroslav Kysela <perex@perex.cz>
Date: Tue, 26 May 2015 07:12:45 +0000 (+0200)
Subject: HTSP: verify channel only when set for autorec/timerec entries, fixes #2892
X-Git-Tag: v4.2.1~2460
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=feeea4b6bfd79ffb4a3af37d23b3f2b9cad4cf7e;p=thirdparty%2Ftvheadend.git

HTSP: verify channel only when set for autorec/timerec entries, fixes #2892
---

diff --git a/src/htsp_server.c b/src/htsp_server.c
index 24a8e6a9c..4704dfdb3 100644
--- a/src/htsp_server.c
+++ b/src/htsp_server.c
@@ -1746,7 +1746,7 @@ htsp_method_deleteAutorecEntry(htsp_connection_t *htsp, htsmsg_t *in)
     return htsp_error("User does not have access");
 
   /* Check access */
-  if (!htsp_user_access_channel(htsp, dae->dae_channel))
+  if (dae->dae_channel && !htsp_user_access_channel(htsp, dae->dae_channel))
     return htsp_error("User does not have access");
 
   autorec_destroy_by_id(daeId, 1);
@@ -1842,7 +1842,7 @@ htsp_method_deleteTimerecEntry(htsp_connection_t *htsp, htsmsg_t *in)
     return htsp_error("User does not have access");
 
   /* Check access */
-  if (!htsp_user_access_channel(htsp, dte->dte_channel))
+  if (dte->dte_channel && !htsp_user_access_channel(htsp, dte->dte_channel))
     return htsp_error("User does not have access");
 
   timerec_destroy_by_id(dteId, 1);