fix(core): use toObject to hide owner field

ae-utbm · Nov 9, 2023 · 2d38980 · 2d38980
1 parent e9b56d0
commit 2d38980
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 2 deletions.
diff --git a/src/modules/files/files.controller.ts b/src/modules/files/files.controller.ts
@@ -25,7 +25,7 @@ export class FilesController {
 		const file = await this.filesService.findOne(id);
 		await file.visibility?.init();
 
-		if (await this.filesService.canReadFile(file, req.user as User)) return file;
+		if (await this.filesService.canReadFile(file, req.user as User)) return file.toObject();
 		throw new UnauthorizedException(this.t.Errors.File.Unauthorized(file.visibility?.name));
 	}
 }
diff --git a/tests/e2e/files.e2e-spec.ts b/tests/e2e/files.e2e-spec.ts
@@ -120,7 +120,6 @@ describe('Files (e2e)', () => {
 					id: file.id,
 					filename: 'test.png',
 					mimetype: 'image/png',
-					path: 'test.png',
 					size: 123,
 					visibility: file.visibility.id,
 					description: 'foo bar',