From 39078d00a3ef3d53e3bb7950c84c8806b7ca3980 Mon Sep 17 00:00:00 2001 From: Morgan Bazalgette Date: Tue, 2 Jan 2018 12:30:32 +0100 Subject: [PATCH] on /api/v1/scores, make users with UserManager not see scores by restricted users --- app/v1/score.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/v1/score.go b/app/v1/score.go index dc24da9..521707d 100644 --- a/app/v1/score.go +++ b/app/v1/score.go @@ -88,7 +88,7 @@ SELECT FROM scores INNER JOIN users ON users.id = scores.userid INNER JOIN users_stats ON users_stats.id = scores.userid -WHERE scores.beatmap_md5 = ? AND scores.completed = '3' AND `+md.User.OnlyUserPublic(true)+ +WHERE scores.beatmap_md5 = ? AND scores.completed = '3' AND `+md.User.OnlyUserPublic(false)+ ` `+genModeClause(md)+` `+sort+common.Paginate(md.Query("p"), md.Query("l"), 100), beatmapMD5) if err != nil {