diff --git a/lib/channel/playlist.js b/lib/channel/playlist.js index d4173f12..ad83420d 100644 --- a/lib/channel/playlist.js +++ b/lib/channel/playlist.js @@ -1211,6 +1211,12 @@ PlaylistModule.prototype.handleClonePlaylist = function (user, data) { }); } + if (!this.channel.modules.permissions.canSeePlaylist(user)) { + return user.socket.emit("errorMsg", { + msg: "You are not allowed to save this playlist" + }); + } + var pl = this.items.toArray(); var self = this; db.saveUserPlaylist(pl, user.getName(), data.name, function (err) {