From 945605703fd984cae55b9d0ad2287a6f49edb256 Mon Sep 17 00:00:00 2001
From: mtvpls <mtvpls@redaaa.ip-ddns.com>
Date: Sun, 26 Apr 2026 23:59:30 +0800
Subject: [PATCH] =?UTF-8?q?=E7=89=B9=E6=AE=8A=E6=BA=90=E6=90=9C=E7=B4=A2?=
 =?UTF-8?q?=E6=9D=83=E9=99=90=E6=8E=A7=E5=88=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app/api/search/route.ts    | 8 +++++++-
 src/app/api/search/ws/route.ts | 7 +++++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/src/app/api/search/route.ts b/src/app/api/search/route.ts
index 1e10e01..b2a783b 100644
--- a/src/app/api/search/route.ts
+++ b/src/app/api/search/route.ts
@@ -6,6 +6,7 @@ import { getAuthInfoFromCookie } from '@/lib/auth';
 import { getAvailableApiSites, getCacheTime, getConfig } from '@/lib/config';
 import { searchFromApi } from '@/lib/downstream';
 import { getProxyToken } from '@/lib/emby-token';
+import { hasFeaturePermission } from '@/lib/permissions';
 import {
   executeSavedSourceScript,
   listEnabledSourceScripts,
@@ -42,6 +43,10 @@ export async function GET(request: NextRequest) {
 
   const config = await getConfig();
   const apiSites = await getAvailableApiSites(authInfo.username);
+  const [canAccessOpenList, canAccessEmby] = await Promise.all([
+    hasFeaturePermission(authInfo.username, 'private_library'),
+    hasFeaturePermission(authInfo.username, 'emby'),
+  ]);
 
   // 创建权重映射表
   const weightMap = new Map<string, number>();
@@ -51,6 +56,7 @@ export async function GET(request: NextRequest) {
 
   // 检查是否配置了 OpenList
   const hasOpenList = !!(
+    canAccessOpenList &&
     config.OpenListConfig?.Enabled &&
     config.OpenListConfig?.URL &&
     config.OpenListConfig?.Username &&
@@ -60,7 +66,7 @@ export async function GET(request: NextRequest) {
   // 获取所有启用的 Emby 源
   const { embyManager } = await import('@/lib/emby-manager');
   const embySourcesMap = await embyManager.getAllClients();
-  const embySources = Array.from(embySourcesMap.values());
+  const embySources = canAccessEmby ? Array.from(embySourcesMap.values()) : [];
 
   console.log('[Search] Emby sources count:', embySources.length);
   console.log('[Search] Emby sources:', embySources.map(s => ({ key: s.config.key, name: s.config.name })));
diff --git a/src/app/api/search/ws/route.ts b/src/app/api/search/ws/route.ts
index f8b750b..19ec13b 100644
--- a/src/app/api/search/ws/route.ts
+++ b/src/app/api/search/ws/route.ts
@@ -5,6 +5,7 @@ import { NextRequest, NextResponse } from 'next/server';
 import { getAuthInfoFromCookie } from '@/lib/auth';
 import { getAvailableApiSites, getConfig } from '@/lib/config';
 import { searchFromApi } from '@/lib/downstream';
+import { hasFeaturePermission } from '@/lib/permissions';
 import { yellowWords } from '@/lib/yellow';
 import { getProxyToken } from '@/lib/emby-token';
 import {
@@ -39,6 +40,10 @@ export async function GET(request: NextRequest) {
 
   const config = await getConfig();
   const apiSites = await getAvailableApiSites(authInfo.username);
+  const [canAccessOpenList, canAccessEmby] = await Promise.all([
+    hasFeaturePermission(authInfo.username, 'private_library'),
+    hasFeaturePermission(authInfo.username, 'emby'),
+  ]);
 
   // 创建权重映射表
   const weightMap = new Map<string, number>();
@@ -55,6 +60,7 @@ export async function GET(request: NextRequest) {
 
   // 检查是否配置了 OpenList
   const hasOpenList = !!(
+    canAccessOpenList &&
     config.OpenListConfig?.Enabled &&
     config.OpenListConfig?.URL &&
     config.OpenListConfig?.Username &&
@@ -63,6 +69,7 @@ export async function GET(request: NextRequest) {
 
   // 检查是否配置了 Emby（支持多源）
   const hasEmby = !!(
+    canAccessEmby &&
     config.EmbyConfig?.Sources &&
     config.EmbyConfig.Sources.length > 0 &&
     config.EmbyConfig.Sources.some(s => s.enabled && s.ServerURL)