changeset 271:02aaff4b4a66

Merged.
author Sascha L. Teichmann <sascha.teichmann@intevation.de>
date Mon, 30 Jul 2018 12:32:11 +0200
parents d1b0d964af09 (diff) 0b2d9f96ddb8 (current diff)
children 5ee0edc01a18
files
diffstat 1 files changed, 6 insertions(+), 3 deletions(-) [+]
line wrap: on
line diff
--- a/controllers/routes.go	Mon Jul 30 12:26:54 2018 +0200
+++ b/controllers/routes.go	Mon Jul 30 12:32:11 2018 +0200
@@ -12,7 +12,10 @@
 
 	api := m.PathPrefix("/api").Subrouter()
 
-	sysAdmin := auth.EnsureRole("sys_admin")
+	var (
+		sysAdmin = auth.EnsureRole("sys_admin")
+		all      = auth.EnsureRole("sys_admin", "waterway_admin", "waterway_user")
+	)
 
 	api.Handle("/users", sysAdmin(&JSONHandler{
 		Handle: listUsers,
@@ -23,11 +26,11 @@
 		Handle: createUser,
 	})).Methods(http.MethodPost)
 
-	api.Handle("/users/{user}", sysAdmin(&JSONHandler{
+	api.Handle("/users/{user}", all(&JSONHandler{
 		Handle: listUser,
 	})).Methods(http.MethodGet)
 
-	api.Handle("/users/{user}", sysAdmin(&JSONHandler{
+	api.Handle("/users/{user}", all(&JSONHandler{
 		Input:  func() interface{} { return new(User) },
 		Handle: updateUser,
 	})).Methods(http.MethodPut)