From 2ae80312ee5532a0d4fbffb5159e5dca95036eda Mon Sep 17 00:00:00 2001
From: Johannes Zellner <johannes@cloudron.io>
Date: Wed, 24 Feb 2021 17:12:18 +0100
Subject: [PATCH] Do not update task info for non-admins

---
 src/js/client.js | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/src/js/client.js b/src/js/client.js
index 2254223c6..ec0035d5e 100644
--- a/src/js/client.js
+++ b/src/js/client.js
@@ -2003,6 +2003,17 @@ angular.module('Application').service('Client', ['$http', '$interval', '$timeout
             if (error) return callback(error);
 
             async.eachLimit(apps, 20, function (app, iteratorCallback) {
+                // only fetch if we have permissions
+                if (!that._userInfo.isAtLeastAdmin) {
+                    app.progress = 0;
+                    app.message = '';
+                    app.taskMinutesActive = 0;
+
+                    that._updateAppCache(app);
+
+                    return iteratorCallback();
+                }
+
                 var getTaskFunc = app.taskId ? that.getTask.bind(null, app.taskId) : function (next) { return next(); };
                 getTaskFunc(function (error, task) {
                     if (error) return iteratorCallback(error);
@@ -2019,7 +2030,7 @@ angular.module('Application').service('Client', ['$http', '$interval', '$timeout
 
                     that._updateAppCache(app);
 
-                    iteratorCallback(null);
+                    iteratorCallback();
                 });
             }, function iteratorDone(error) {
                 if (error) return callback(error);