From e13f0ba2344775edd3e3d5dc8f7e2acfbbf4ee09 Mon Sep 17 00:00:00 2001
From: Bill Thornton <thornbill@users.noreply.github.com>
Date: Sun, 5 May 2024 04:50:48 -0400
Subject: [PATCH] Add edit permission check for adding to playlist

---
 .../playlisteditor/playlisteditor.ts          | 31 +++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/src/components/playlisteditor/playlisteditor.ts b/src/components/playlisteditor/playlisteditor.ts
index 45b41e82d6..eeb4c97adc 100644
--- a/src/components/playlisteditor/playlisteditor.ts
+++ b/src/components/playlisteditor/playlisteditor.ts
@@ -149,6 +149,31 @@ function populatePlaylists(editorOptions: PlaylistEditorOptions, panel: DialogEl
             recursive: true
         })
         .then(({ data }) => {
+            return Promise.all((data.Items || []).map(item => {
+                const playlist = {
+                    item,
+                    permissions: undefined
+                };
+
+                if (!item.Id) return playlist;
+
+                return getPlaylistsApi(api)
+                    .getPlaylistUser({
+                        playlistId: item.Id,
+                        userId: apiClient.getCurrentUserId()
+                    })
+                    .then(({ data: permissions }) => ({
+                        ...playlist,
+                        permissions
+                    }))
+                    .catch((err) => {
+                        console.warn('[PlaylistEditor] Failed to fetch playlist permissions', err);
+
+                        return playlist;
+                    });
+            }));
+        })
+        .then(playlists => {
             let html = '';
 
             if ((editorOptions.enableAddToPlayQueue !== false && playbackManager.isPlaying()) || SyncPlay?.Manager.isSyncPlayEnabled()) {
@@ -157,8 +182,10 @@ function populatePlaylists(editorOptions: PlaylistEditorOptions, panel: DialogEl
 
             html += `<option value="">${globalize.translate('OptionNew')}</option>`;
 
-            html += data.Items?.map(i => {
-                return `<option value="${i.Id}">${escapeHtml(i.Name)}</option>`;
+            html += playlists.map(({ item, permissions }) => {
+                if (!permissions?.CanEdit) return '';
+
+                return `<option value="${item.Id}">${escapeHtml(item.Name)}</option>`;
             });
 
             select.innerHTML = html;