diff --git a/src/FederationServer/Methods/Attachments/DownloadAttachment.php b/src/FederationServer/Methods/Attachments/DownloadAttachment.php index a8ad400..20bcaf5 100644 --- a/src/FederationServer/Methods/Attachments/DownloadAttachment.php +++ b/src/FederationServer/Methods/Attachments/DownloadAttachment.php @@ -42,6 +42,7 @@ { // Require authentication if confidential $operator = FederationServer::getAuthenticatedOperator(); + if(!$operator->canManageBlacklist()) { throw new RequestException('Insufficient Permissions to view confidential evidence', 401);