From 03de680915276028137be7ba3dc2fe4764bfec91 Mon Sep 17 00:00:00 2001
From: JonnyWong16 <Jonny.Wong.16@gmail.com>
Date: Mon, 20 Jun 2016 23:28:45 -0700
Subject: [PATCH] Don't allow guests to refresh poster images

---
 plexpy/webserve.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/plexpy/webserve.py b/plexpy/webserve.py
index 21011577..c7d054c0 100644
--- a/plexpy/webserve.py
+++ b/plexpy/webserve.py
@@ -3217,7 +3217,9 @@ class WebInterface(object):
             logger.error('No image input received.')
             return
 
-        refresh = True if refresh == 'true' else False
+        if refresh:
+            mo = member_of('admin')
+            refresh = True if mo() else False
 
         if rating_key and not img:
             img = '/library/metadata/%s/thumb/1337' % rating_key