Files
frigate/frigate/api
Josh Hawkins 5fc8d4f1c6 return 403 for a snapshot or thumbnail on another camera
The broad `except Exception` handlers in `event_snapshot` and `event_thumbnail` caught the `HTTPException` from `require_camera_access`, so a restricted user asking for another camera's snapshot got a 404 instead of a 403, and for an object still being tracked the snapshot was rendered before the check ran. Both endpoints now look up the event and check access in their own block, the way the other endpoints do, so a denial propagates.
2026-09-17 16:55:19 -05:00
..
2026-09-15 07:48:30 -05:00
2026-09-12 07:30:04 -06:00
2026-09-12 07:30:04 -06:00
2026-09-12 07:30:04 -06:00
2026-09-15 07:48:30 -05:00
2026-07-06 12:28:02 -05:00
2026-07-06 12:28:02 -05:00
2026-09-15 07:48:30 -05:00