From feeea4b6bfd79ffb4a3af37d23b3f2b9cad4cf7e Mon Sep 17 00:00:00 2001 From: Jaroslav Kysela Date: Tue, 26 May 2015 09:12:45 +0200 Subject: [PATCH] HTSP: verify channel only when set for autorec/timerec entries, fixes #2892 --- src/htsp_server.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/htsp_server.c b/src/htsp_server.c index 24a8e6a9c..4704dfdb3 100644 --- a/src/htsp_server.c +++ b/src/htsp_server.c @@ -1746,7 +1746,7 @@ htsp_method_deleteAutorecEntry(htsp_connection_t *htsp, htsmsg_t *in) return htsp_error("User does not have access"); /* Check access */ - if (!htsp_user_access_channel(htsp, dae->dae_channel)) + if (dae->dae_channel && !htsp_user_access_channel(htsp, dae->dae_channel)) return htsp_error("User does not have access"); autorec_destroy_by_id(daeId, 1); @@ -1842,7 +1842,7 @@ htsp_method_deleteTimerecEntry(htsp_connection_t *htsp, htsmsg_t *in) return htsp_error("User does not have access"); /* Check access */ - if (!htsp_user_access_channel(htsp, dte->dte_channel)) + if (dte->dte_channel && !htsp_user_access_channel(htsp, dte->dte_channel)) return htsp_error("User does not have access"); timerec_destroy_by_id(dteId, 1); -- 2.47.2