Fixed bug w/ not checking permissions in copy

adsabs · Dec 5, 2023 · c4e22f6 · c4e22f6
1 parent 02ead23
commit c4e22f6
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/biblib/views/operations_view.py b/biblib/views/operations_view.py
@@ -217,6 +217,10 @@ def post(self, library):
                 return err(NO_LIBRARY_SPECIFIED_ERROR)
             if len(data['libraries']) > 1:
                 return err(TOO_MANY_LIBRARIES_SPECIFIED_ERROR)
+            # Check the permissions of the user
+            if not self.write_access(service_uid=user_editing_uid,
+                                     library_id=data['libraries'][0]):
+                return err(NO_PERMISSION_ERROR)
 
         lib_names = []
         with current_app.session_scope() as session: