From 1b8f62d143ef90018674833c69f1e4bcb258132f Mon Sep 17 00:00:00 2001 From: Matt Baer Date: Thu, 6 Feb 2020 17:44:02 -0500 Subject: [PATCH] Require authenticated user on draft edit routes - /edit - /meta --- routes.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/routes.go b/routes.go index ba531fb..11c0389 100644 --- a/routes.go +++ b/routes.go @@ -175,8 +175,8 @@ func InitRoutes(apper Apper, r *mux.Router) *mux.Router { } // All the existing stuff - write.HandleFunc(draftEditPrefix+"/{action}/edit", handler.Web(handleViewPad, UserLevelOptional)).Methods("GET") - write.HandleFunc(draftEditPrefix+"/{action}/meta", handler.Web(handleViewMeta, UserLevelOptional)).Methods("GET") + write.HandleFunc(draftEditPrefix+"/{action}/edit", handler.Web(handleViewPad, UserLevelUser)).Methods("GET") + write.HandleFunc(draftEditPrefix+"/{action}/meta", handler.Web(handleViewMeta, UserLevelUser)).Methods("GET") // Collections if apper.App().cfg.App.SingleUser { RouteCollections(handler, write.PathPrefix("/").Subrouter())