fix(core): use toObject to hide owner field

Author: Juknum

src/modules/files/files.controller.ts

@@ -25,7 +25,7 @@ export class FilesController {
 		const file = await this.filesService.findOne(id);
 		await file.visibility?.init();
 
-		if (await this.filesService.canReadFile(file, req.user as User)) return file;
+		if (await this.filesService.canReadFile(file, req.user as User)) return file.toObject();
 		throw new UnauthorizedException(this.t.Errors.File.Unauthorized(file.visibility?.name));
 	}
 }

tests/e2e/files.e2e-spec.ts

@@ -120,7 +120,6 @@ describe('Files (e2e)', () => {
 					id: file.id,
 					filename: 'test.png',
 					mimetype: 'image/png',
-					path: 'test.png',
 					size: 123,
 					visibility: file.visibility.id,
 					description: 'foo bar',