github/supysonic
1
0
Fork 0
mirror of https://github.com/spl0k/supysonic.git synced 2024-12-22 17:06:17 +00:00
Code Issues Releases Wiki Activity

Merge branch 'public_playlist_access'

Browse Source
This commit is contained in:
spl0k 2018-03-22 19:19:15 +01:00
commit 366e350cd4
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
supysonic/api/playlists.py
View File

@ -37,7 +37,7 @@ def list_playlists():
@api.route('/getPlaylist.view', methods = [ 'GET', 'POST' ])
def show_playlist():
res = get_entity(Playlist)
if res.user.id != request.user.id and not request.user.admin:
if res.user.id != request.user.id and not res.public and not request.user.admin:
raise Forbidden()
info = res.as_subsonic_playlist(request.user)

5
tests/api/test_playlist.py
View File

@ -94,12 +94,13 @@ class PlaylistTestCase(ApiTestBase):
# other's private from non admin
with db_session:
playlist = Playlist.get(lambda p: not p.public == False and p.user.name == 'alice')
playlist = Playlist.get(lambda p: not p.public and p.user.name == 'alice')
self._make_request('getPlaylist', { 'u': 'bob', 'p': 'B0b', 'id': str(playlist.id) }, error = 50)
# standard
rv, child = self._make_request('getPlaylists', tag = 'playlists')
rv, child = self._make_request('getPlaylist', { 'id': child[0].get('id') }, tag = 'playlist')
self._make_request('getPlaylist', { 'id': child[0].get('id') }, tag = 'playlist')
rv, child = self._make_request('getPlaylist', { 'id': child[1].get('id') }, tag = 'playlist')
self.assertEqual(child.get('songCount'), '2')
self.assertEqual(self._xpath(child, 'count(./entry)'), 2) # don't count children, there may be 'allowedUser's (even though not supported by supysonic)
self.assertEqual(child.get('duration'), '4')