From 4449241a8f63fdaeaa4995aa7ec34127c322b9dd Mon Sep 17 00:00:00 2001
From: TheCatLady <52870424+TheCatLady@users.noreply.github.com>
Date: Sat, 17 Apr 2021 11:07:38 -0400
Subject: [PATCH] fix(api): add check for 4K request perms to request creation
 endpoint (#1450)

---
 server/routes/request.ts | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/server/routes/request.ts b/server/routes/request.ts
index 6ad4ac053..9fb572631 100644
--- a/server/routes/request.ts
+++ b/server/routes/request.ts
@@ -175,6 +175,36 @@ requestRoutes.post(
         });
       }
 
+      if (req.body.is4k) {
+        if (
+          req.body.mediaType === MediaType.MOVIE &&
+          !req.user?.hasPermission(
+            [Permission.REQUEST_4K, Permission.REQUEST_4K_MOVIE],
+            {
+              type: 'or',
+            }
+          )
+        ) {
+          return next({
+            status: 403,
+            message: 'You do not have permission to make 4K movie requests.',
+          });
+        } else if (
+          req.body.mediaType === MediaType.TV &&
+          !req.user?.hasPermission(
+            [Permission.REQUEST_4K, Permission.REQUEST_4K_TV],
+            {
+              type: 'or',
+            }
+          )
+        ) {
+          return next({
+            status: 403,
+            message: 'You do not have permission to make 4K series requests.',
+          });
+        }
+      }
+
       const quotas = await requestUser.getQuota();
 
       if (req.body.mediaType === MediaType.MOVIE && quotas.movie.restricted) {