jjkiers/cloudron-box
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

only admin can view activity logs

Browse Source
This commit is contained in:
Girish Ramakrishnan
2016-05-02 14:54:20 -07:00
parent 6c1bd522e6
commit da79e4f229
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/server.js
View File

@@ -178,12 +178,12 @@ function initializeExpressSync() {
router.post('/api/v1/settings/admin_certificate', settingsScope, routes.settings.setAdminCertificate);
// eventlog route
router.get('/api/v1/eventlog', settingsScope, routes.eventlog.get);
router.get('/api/v1/eventlog', settingsScope, routes.user.requireAdmin, routes.eventlog.get);
// backup routes
router.get ('/api/v1/backups', settingsScope, routes.backups.get);
router.post('/api/v1/backups', settingsScope, routes.backups.create);
router.get ('/api/v1/backups/:backupId', appsScope, routes.user.requireAdmin, routes.backups.download);
router.get ('/api/v1/backups/:backupId', appsScope, routes.user.requireAdmin, routes.backups.download);
// disable server timeout. we use the timeout middleware to handle timeouts on a route level
httpServer.setTimeout(0);