fix(api): add write permission requirement for update_exif endpoint

2026-03-15 13:07:22 +08:00 · 2026-03-15 13:07:22 +08:00 · a89d5befd4
parent 34ca95ec51
commit a89d5befd4
1 changed files with 1 additions and 1 deletions
--- a/scripts/iib/api.py
+++ b/scripts/iib/api.py
@ -877,7 +877,7 @@ def infinite_image_browsing_api(app: FastAPI, **kwargs):
        path: str
        exif: str

-    @app.post(api_base + "/update_exif", dependencies=[Depends(verify_secret)])
+    @app.post(api_base + "/update_exif", dependencies=[Depends(verify_secret), Depends(write_permission_required)])
    async def update_exif(req: UpdateExifReq):
        """更新图片/视频的 exif 信息"""
        conn = DataBase.get_conn()