From d8e42379612d2dcf95233ddecea00b5d0c0b4f6e Mon Sep 17 00:00:00 2001 From: Stefan Stammberger Date: Wed, 17 Nov 2021 14:33:23 +0100 Subject: [PATCH] fix: TipJar wallet access bug --- lnbits/extensions/tipjar/views_api.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lnbits/extensions/tipjar/views_api.py b/lnbits/extensions/tipjar/views_api.py index c25e08ea..1033dbe8 100644 --- a/lnbits/extensions/tipjar/views_api.py +++ b/lnbits/extensions/tipjar/views_api.py @@ -172,7 +172,7 @@ async def api_delete_tip( raise HTTPException( status_code=HTTPStatus.NOT_FOUND, detail="No tip with this ID!" ) - if tip.wallet != g.wallet.id: + if tip.wallet != wallet.wallet.id: raise HTTPException( status_code=HTTPStatus.FORBIDDEN, detail="Not authorized to delete this tip!", @@ -192,7 +192,7 @@ async def api_delete_tipjar( raise HTTPException( status_code=HTTPStatus.NOT_FOUND, detail="No tipjar with this ID!" ) - if tipjar.wallet != g.wallet.id: + if tipjar.wallet != wallet.wallet.id: raise HTTPException( status_code=HTTPStatus.FORBIDDEN,