require owner for network blocklist

2020-08-31 22:53:22 -07:00
parent b7440ee516
commit c26dda7cc9
1 changed files with 2 additions and 2 deletions
@@ -242,8 +242,8 @@ function initializeExpressSync() {
    }, routes.branding.set);

    // network routes
-    router.get ('/api/v1/network/blocklist',       token, authorizeAdmin, routes.network.getBlocklist);
-    router.post('/api/v1/network/blocklist', json, token, authorizeAdmin, routes.network.setBlocklist);
+    router.get ('/api/v1/network/blocklist',       token, authorizeOwner, routes.network.getBlocklist);
+    router.post('/api/v1/network/blocklist', json, token, authorizeOwner, routes.network.setBlocklist);

    // settings routes (these are for the settings tab - avatar & name have public routes for normal users. see above)
    router.get ('/api/v1/settings/:setting',            token, authorizeAdmin, routes.settings.get);