From 66da1009fa6e88eda2b6f75469806d5ec2c58c65 Mon Sep 17 00:00:00 2001 From: Frank Schubert Date: Tue, 8 Apr 2025 14:31:41 +0200 Subject: [PATCH] Fixed netowner not able to get pricing in own networks from AddressdbAPI --- application/Api/v1/AddressdbApicontroller.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/application/Api/v1/AddressdbApicontroller.php b/application/Api/v1/AddressdbApicontroller.php index 156b4f1ee..43a86d6b4 100644 --- a/application/Api/v1/AddressdbApicontroller.php +++ b/application/Api/v1/AddressdbApicontroller.php @@ -911,8 +911,11 @@ class AddressdbApicontroller extends mfBaseApicontroller { if(!$netop) { $netop = PreordercampaignOperatorModel::getFirst(["operator_id" => $this->me->address_id, "preordercampaign_id" => $campaign->id]); } + if(!$netop) { - return mfResponse::Unauthorized(); + if($campaign->network->owner_id != $this->me->address_id) { + return mfResponse::Unauthorized(); + } } $netoperator = $netop->operator;