gfdgsd

src/inc/routes/scroller.mjs

@@ -236,6 +236,13 @@ export default (router, tpl) => {
       ${sessionId ? db`EXISTS (SELECT 1 FROM favorites WHERE favorites.item_id = items.id AND favorites.user_id = ${sessionId})` : db`false`} AS is_faved
     `;
     const sid = req.session ? +req.session.id : null;
+    const isOwnerOrAdmin = req.session && (req.session.admin || req.session.is_moderator);
+    const sessionUser = req.session?.user ? req.session.user.toLowerCase() : null;
+    const visibilityFilter = isOwnerOrAdmin
+      ? db``
+      : (sessionUser
+        ? db`AND (COALESCE(items.visibility, 0) = 0 OR LOWER(items.username) = ${sessionUser})`
+        : db`AND COALESCE(items.visibility, 0) = 0`);
 
     try {
       let rows;
@@ -268,7 +275,7 @@ export default (router, tpl) => {
             WHERE
               ${db.unsafe(modeQuery)}
               AND items.active = true
-              AND COALESCE(items.visibility, 0) = 0
+              ${visibilityFilter}
               ${excludeSwfSQL}
               ${excludePdfSQL}
               ${excludeArchiveSQL}
@@ -293,7 +300,7 @@ export default (router, tpl) => {
           WHERE
             ${db.unsafe(modeQuery)}
             AND items.active = true
-            AND COALESCE(items.visibility, 0) = 0
+            ${visibilityFilter}
             ${excludeSwfSQL}
             ${excludePdfSQL}
             ${excludeArchiveSQL}