g

2026-08-07 22:08:53 +02:00
parent feb408338a
commit 4fd15ec338
10 changed files with 113 additions and 45 deletions
@@ -355,6 +355,9 @@ export default router => {

    // Update Default Upload Visibility preference
    group.put(/\/default_upload_visibility/, lib.loggedin, async (req, res) => {
+      if (cfg.allow_user_upload_visibility === false || cfg.websrv?.allow_user_upload_visibility === false) {
+        return res.json({ success: false, msg: 'Custom upload visibility is disabled by the administrator' }, 403);
+      }
      const vis = parseInt(req.post.default_upload_visibility, 10);
      if (isNaN(vis) || ![0, 1, 2].includes(vis)) {
        return res.json({ success: false, msg: 'Invalid visibility option' }, 400);