fix(router): require AdminWrite scope for URL test related routes

2 months ago · bce08f88e9
parent c278c6af39
commit bce08f88e9
2 changed files with 3 additions and 1 deletions
--- a/2
+++ b/2
@ -1 +1 @@
-Subproject commit 2e995f1d4676d15b714dd82cb3aefe2e7697fcea
+Subproject commit 083484109f15e361bc92330ec0318fe758d43d72
--- a/routers/router.go
+++ b/routers/router.go
@ -928,6 +928,7 @@ func initMasterRouter(dep dependency.Dep) *gin.Engine {
 				tool := admin.Group("tool")
 				{
 					tool.GET("wopi",
+						middleware.RequiredScopes(types.ScopeAdminWrite),
 						controllers.FromQuery[adminsvc.FetchWOPIDiscoveryService](adminsvc.FetchWOPIDiscoveryParamCtx{}),
 						controllers.AdminFetchWopi,
 					)
@ -936,6 +937,7 @@ func initMasterRouter(dep dependency.Dep) *gin.Engine {
 						controllers.FromJSON[adminsvc.ThumbGeneratorTestService](adminsvc.ThumbGeneratorTestParamCtx{}),
 						controllers.AdminTestThumbGenerator)
 					tool.POST("mail",
+						middleware.RequiredScopes(types.ScopeAdminWrite),
 						controllers.FromJSON[adminsvc.TestSMTPService](adminsvc.TestSMTPParamCtx{}),
 						controllers.AdminSendTestMail,
 					)