Protect the /project/:project/meta route

2025-12-06 11:37:08 +00:00 · 2021-05-16 19:48:41 +02:00
parent b5a762b5e3
commit a8850e5d0c
1 changed files with 1 additions and 1 deletions
--- a/lib/www/server/api/index.js
+++ b/lib/www/server/api/index.js
@@ -161,7 +161,7 @@ app.map({
 // 		post: [ mw.info.post ],
 	},
 	'/project/:project/meta/': {
-		put: [ mw.meta.put ],
+		put: [ mw.auth.access.write, mw.meta.put ],
 	},
 	'/project/:project/meta/:path(*)': {
 		// Path examples: