1
0
Fork 0
mirror of synced 2024-06-29 03:20:34 +12:00

bugfix: wrong permissions on worfklow endpoint

This commit is contained in:
Michael Shanks 2020-05-27 19:18:39 +01:00
parent 2f1fc8109b
commit a1d83cdc4c

View file

@ -1,7 +1,7 @@
const Router = require("@koa/router")
const controller = require("../controllers/workflow")
const authorized = require("../../middleware/authorized")
const { BUILDER } = require("../../utilities/accessLevels")
const { BUILDER, EXECUTE_WORKFLOW } = require("../../utilities/accessLevels")
const router = Router()
@ -17,7 +17,7 @@ router
.post("/api/:instanceId/workflows", authorized(BUILDER), controller.create)
.post(
"/api/:instanceId/workflows/action",
authorized(BUILDER),
authorized(EXECUTE_WORKFLOW),
controller.executeAction
)
.delete(