From 84a07030d0648300b6dfea959dd57c3246d4eda0 Mon Sep 17 00:00:00 2001
From: Calvin Montgomery <calzoneman@gmail.com>
Date: Sat, 2 Aug 2014 19:12:09 -0700
Subject: [PATCH] Disallow cloning playlist if user doesn't have seeplaylist
 permission

---
 lib/channel/playlist.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/channel/playlist.js b/lib/channel/playlist.js
index d4173f12..ad83420d 100644
--- a/lib/channel/playlist.js
+++ b/lib/channel/playlist.js
@@ -1211,6 +1211,12 @@ PlaylistModule.prototype.handleClonePlaylist = function (user, data) {
         });
     }
 
+    if (!this.channel.modules.permissions.canSeePlaylist(user)) {
+        return user.socket.emit("errorMsg", {
+            msg: "You are not allowed to save this playlist"
+        });
+    }
+
     var pl = this.items.toArray();
     var self = this;
     db.saveUserPlaylist(pl, user.getName(), data.name, function (err) {