fix(server): scoped permissions for more endpoints (#25452)

2026-05-18 03:10:24 +03:00 · 2026-01-23 15:03:57 +01:00
parent 84679fb2b2
commit 20dca39143
7 changed files with 16 additions and 5 deletions
@@ -202,7 +202,7 @@ export class AssetMediaController {
  }

  @Post('exist')
-  @Authenticated()
+  @Authenticated({ permission: Permission.AssetUpload })
  @Endpoint({
    summary: 'Check existing assets',
    description: 'Checks if multiple assets exist on the server and returns all existing - used by background backup',