Fix #1739 (opds download with anonymous browsing enabled)
This commit is contained in:
parent
ff5d333fc8
commit
cb8dfdde4c
|
@ -386,7 +386,9 @@ def feed_shelf(book_id):
|
||||||
def opds_download_link(book_id, book_format):
|
def opds_download_link(book_id, book_format):
|
||||||
# I gave up with this: With enabled ldap login, the user doesn't get logged in, therefore it's always guest
|
# I gave up with this: With enabled ldap login, the user doesn't get logged in, therefore it's always guest
|
||||||
# workaround, loading the user from the request and checking it's download rights here
|
# workaround, loading the user from the request and checking it's download rights here
|
||||||
if not load_user_from_request(request).role_download():
|
# in case of anonymous browsing user is None
|
||||||
|
user = load_user_from_request(request)
|
||||||
|
if not user or not user.role_download():
|
||||||
return abort(403)
|
return abort(403)
|
||||||
if "Kobo" in request.headers.get('User-Agent'):
|
if "Kobo" in request.headers.get('User-Agent'):
|
||||||
client = "kobo"
|
client = "kobo"
|
||||||
|
|
Loading…
Reference in New Issue
Block a user