From 3ebc903ce9a4acc2d351a190372c008abad2eae6 Mon Sep 17 00:00:00 2001
From: Isaac Abadi <IsaacMGrynsztein@gmail.com>
Date: Mon, 27 Jul 2020 22:09:15 -0400
Subject: [PATCH] Fixed bug where non-admins in multi user mode could change
 the settings if they could open the dialog

---
 backend/app.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/app.js b/backend/app.js
index f7c1ee7..cce0425 100644
--- a/backend/app.js
+++ b/backend/app.js
@@ -1892,7 +1892,7 @@ app.get('/api/config', function(req, res) {
     });
 });
 
-app.post('/api/setConfig', function(req, res) {
+app.post('/api/setConfig', optionalJwt, function(req, res) {
     let new_config_file = req.body.new_config_file;
     if (new_config_file && new_config_file['YoutubeDLMaterial']) {
         let success = config_api.setConfigFile(new_config_file);