Make backup configure owner only

This commit is contained in:
Girish Ramakrishnan
2020-03-18 17:13:41 -07:00
parent 4420470242
commit 38cf31885c
2 changed files with 6 additions and 3 deletions

View File

@@ -238,6 +238,7 @@ function initializeExpressSync() {
// settings routes (these are for the settings tab - avatar & name have public routes for normal users. see above)
router.get ('/api/v1/settings/:setting', token, authorizeAdmin, routes.settings.get);
router.post('/api/v1/settings/backup_config', token, authorizeOwner, routes.settings.setBackupConfig);
router.post('/api/v1/settings/:setting', token, authorizeAdmin, (req, res, next) => {
return req.params.setting === 'cloudron_avatar' ? multipart(req, res, next) : next();
}, routes.settings.set);