fix(API): Allow RequestOnBehalf rights if requested from the API (#4919)

Ombi-app · May 9, 2023 · bb6dedd · bb6dedd
1 parent 91e6517
commit bb6dedd
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/src/Ombi.Core/Engine/MovieRequestEngine.cs b/src/Ombi.Core/Engine/MovieRequestEngine.cs
@@ -80,7 +80,8 @@ public async Task<RequestEngineResult> RequestMovie(MovieRequestViewModel model)
             var userDetails = await GetUser();
             var canRequestOnBehalf = model.RequestOnBehalf.HasValue();
 
-            var isAdmin = await UserManager.IsInRoleAsync(userDetails, OmbiRoles.PowerUser)
+            var isAdmin = Username.Equals("API", StringComparison.CurrentCultureIgnoreCase)
+                || await UserManager.IsInRoleAsync(userDetails, OmbiRoles.PowerUser)
                 || await UserManager.IsInRoleAsync(userDetails, OmbiRoles.Admin);
             if (canRequestOnBehalf && !isAdmin)
             {

diff --git a/src/Ombi.Core/Engine/TvRequestEngine.cs b/src/Ombi.Core/Engine/TvRequestEngine.cs
@@ -161,7 +161,7 @@ public async Task<RequestEngineResult> RequestTvShow(TvRequestViewModelV2 tv)
             var user = await GetUser();
             var canRequestOnBehalf = tv.RequestOnBehalf.HasValue();
 
-            var isAdmin = await UserManager.IsInRoleAsync(user, OmbiRoles.PowerUser) || await UserManager.IsInRoleAsync(user, OmbiRoles.Admin);
+            var isAdmin = Username.Equals("API", StringComparison.CurrentCultureIgnoreCase) || await UserManager.IsInRoleAsync(user, OmbiRoles.PowerUser) || await UserManager.IsInRoleAsync(user, OmbiRoles.Admin);
             if (tv.RequestOnBehalf.HasValue() && !isAdmin)
             {
                 return new RequestEngineResult