From 1e03feadb550e4414b5589a6a8df57f538efba15 Mon Sep 17 00:00:00 2001
From: kodareef5 <kodareef5@gmail.com>
Date: Sat, 4 Apr 2026 15:58:17 -0400
Subject: [PATCH] fix: check download permission in resource handler (#5891)

---
 http/resource.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/http/resource.go b/http/resource.go
index 3f78cb0c..dfe722a9 100644
--- a/http/resource.go
+++ b/http/resource.go
@@ -30,7 +30,7 @@ var resourceGetHandler = withUser(func(w http.ResponseWriter, r *http.Request, d
 		Expand:     true,
 		ReadHeader: d.server.TypeDetectionByHeader,
 		Checker:    d,
-		Content:    true,
+		Content:    d.user.Perm.Download,
 	})
 	if err != nil {
 		return errToStatus(err), err
@@ -42,6 +42,9 @@ var resourceGetHandler = withUser(func(w http.ResponseWriter, r *http.Request, d
 		file.ApplySort()
 		return renderJSON(w, r, file)
 	} else if encoding == "true" {
+		if !d.user.Perm.Download {
+			return http.StatusAccepted, nil
+		}
 		if file.Type != "text" {
 			return renderJSON(w, r, file)
 		}