From ecac3f0c5f243fd95ddaa091069d7ddda3803e88 Mon Sep 17 00:00:00 2001
From: SabreCat <sabe@habitica.com>
Date: Fri, 27 Jan 2023 19:26:19 -0600
Subject: [PATCH] fix(backgrounds): disallow equipping unowned bashground Also
 add missing headers when recording group task creation

---
 website/server/controllers/api-v3/tasks/groups.js | 1 +
 website/server/libs/user/index.js                 | 4 +++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/website/server/controllers/api-v3/tasks/groups.js b/website/server/controllers/api-v3/tasks/groups.js
index 963fcdbf91..d80e0bb5f2 100644
--- a/website/server/controllers/api-v3/tasks/groups.js
+++ b/website/server/controllers/api-v3/tasks/groups.js
@@ -68,6 +68,7 @@ api.createGroupTasks = {
         category: 'behavior',
         taskType: task.type,
         groupID: group._id,
+        headers: req.headers,
       });
     });
   },
diff --git a/website/server/libs/user/index.js b/website/server/libs/user/index.js
index 35068ad3f9..4ed618b36f 100644
--- a/website/server/libs/user/index.js
+++ b/website/server/libs/user/index.js
@@ -97,7 +97,9 @@ function checkPreferencePurchase (user, path, item) {
   const itemPath = `${path}.${item}`;
   const appearance = _.get(common.content.appearances, itemPath);
   if (!appearance) return false;
-  if (appearance.price === 0) return true;
+  if (appearance.price === 0 && path !== 'background') {
+    return true;
+  }
 
   return _.get(user.purchased, itemPath);
 }