From: Guillaume Pellerin Date: Sun, 17 Sep 2017 23:25:57 +0000 (+0200) Subject: Fix video player URL against X-Accel, allow not download extension, disable media... X-Git-Tag: 1.6.4b~4 X-Git-Url: https://git.parisson.com/?a=commitdiff_plain;h=81545e3d65dcc2dbf17c8b5b13dc159f2ce58d06;p=telemeta.git Fix video player URL against X-Accel, allow not download extension, disable media dir access rights modification --- diff --git a/app/scripts/app.sh b/app/scripts/app.sh index a1775b6e..f5f806e2 100644 --- a/app/scripts/app.sh +++ b/app/scripts/app.sh @@ -32,6 +32,7 @@ python $manage bower_install -- --allow-root # telemeta setup python $manage telemeta-create-admin-user python $manage telemeta-create-boilerplate +python $manage telemeta-setup-enumerations # Delete Timeside database if it exists cat /srv/src/telemeta/scripts/sql/drop_timeside.sql | python $manage dbshell @@ -41,7 +42,7 @@ if [ $REINDEX = "True" ]; then fi # fix media access rights -find $media -path ${media}import -prune -o -type d -not -user www-data -exec chown www-data:www-data {} \; +# find $media -path ${media}import -prune -o -type d -not -user www-data -exec chown www-data:www-data {} \; # choose dev or prod mode if [ "$1" = "--runserver" ]; then diff --git a/telemeta/templates/telemeta/inc/mediaitem_video.html b/telemeta/templates/telemeta/inc/mediaitem_video.html index 3b43cdd5..8596062e 100644 --- a/telemeta/templates/telemeta/inc/mediaitem_video.html +++ b/telemeta/templates/telemeta/inc/mediaitem_video.html @@ -8,7 +8,7 @@ {% endif %} {% endfor %} - + diff --git a/telemeta/views/item.py b/telemeta/views/item.py index fccc2d88..56210b2a 100644 --- a/telemeta/views/item.py +++ b/telemeta/views/item.py @@ -395,6 +395,9 @@ class ItemView(ItemBaseMixin): item = MediaItem.objects.get(public_id=public_id) public_access = get_item_access(item, request.user) + if not extension: + extension = item.file.path.split('.')[-1] + if (not public_access == 'full' or not extension in settings.TELEMETA_STREAMING_FORMATS) and \ not (request.user.has_perm('telemeta.can_play_all_items') or request.user.is_superuser): mess = ugettext('Access not allowed')