diff --git a/src/server.js b/src/server.js index 3bf50d8f5..39ba631fd 100644 --- a/src/server.js +++ b/src/server.js @@ -244,7 +244,13 @@ function initializeExpressSync() { }, routes.settings.set); // email routes - router.get('/api/v1/mailserver/:pathname', token, authorizeAdmin, routes.mailserver.proxy); + router.get('/api/v1/mailserver/:pathname', token, (req, res, next) => { + // some routes are more special than others + if (req.params.pathname === 'eventlog' || req.params.pathname === 'clear_eventlog') { + return authorizeOwner(req, res, next); + } + authorizeAdmin(req, res, next); + }, routes.mailserver.proxy); router.get ('/api/v1/mail/:domain', token, authorizeAdmin, routes.mail.getDomain); router.post('/api/v1/mail', token, authorizeAdmin, routes.mail.addDomain);