using System; using Jellyfin.Data.Enums; using MediaBrowser.Controller.Net; using Microsoft.AspNetCore.Http; namespace Jellyfin.Api.Helpers { /// /// Request Extensions. /// public static class RequestHelpers { /// /// Splits a string at a separating character into an array of substrings. /// /// The string to split. /// The char that separates the substrings. /// Option to remove empty substrings from the array. /// An array of the substrings. internal static string[] Split(string value, char separator, bool removeEmpty) { if (string.IsNullOrWhiteSpace(value)) { return Array.Empty(); } return removeEmpty ? value.Split(new[] { separator }, StringSplitOptions.RemoveEmptyEntries) : value.Split(separator); } /// /// Checks if the user can update an entry. /// /// Instance of the interface. /// The . /// The user id. /// Whether to restrict the user preferences. /// A whether the user can update the entry. internal static bool AssertCanUpdateUser(IAuthorizationContext authContext, HttpRequest requestContext, Guid userId, bool restrictUserPreferences) { var auth = authContext.GetAuthorizationInfo(requestContext); var authenticatedUser = auth.User; // If they're going to update the record of another user, they must be an administrator if ((!userId.Equals(auth.UserId) && !authenticatedUser.HasPermission(PermissionKind.IsAdministrator)) || (restrictUserPreferences && !authenticatedUser.EnableUserPreferenceAccess)) { return false; } return true; } } }