From a8850e5d0c5e182647583b96ec013e4ea467bdd4 Mon Sep 17 00:00:00 2001
From: "D. Berge" <dberge@aaltronav.eu>
Date: Sun, 16 May 2021 19:48:41 +0200
Subject: [PATCH] Protect the /project/:project/meta route

---
 lib/www/server/api/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/www/server/api/index.js b/lib/www/server/api/index.js
index 28de495..e15807e 100644
--- a/lib/www/server/api/index.js
+++ b/lib/www/server/api/index.js
@@ -161,7 +161,7 @@ app.map({
 // 		post: [ mw.info.post ],
 	},
 	'/project/:project/meta/': {
-		put: [ mw.meta.put ],
+		put: [ mw.auth.access.write, mw.meta.put ],
 	},
 	'/project/:project/meta/:path(*)': {
 		// Path examples: