1
0
Fork 0
mirror of synced 2024-10-01 09:38:55 +13:00

bugfix: wrong permissions on worfklow endpoint

This commit is contained in:
Michael Shanks 2020-05-27 19:18:39 +01:00
parent 473468b481
commit b3cd17b9a3

View file

@ -1,7 +1,7 @@
const Router = require("@koa/router") const Router = require("@koa/router")
const controller = require("../controllers/workflow") const controller = require("../controllers/workflow")
const authorized = require("../../middleware/authorized") const authorized = require("../../middleware/authorized")
const { BUILDER } = require("../../utilities/accessLevels") const { BUILDER, EXECUTE_WORKFLOW } = require("../../utilities/accessLevels")
const router = Router() const router = Router()
@ -17,7 +17,7 @@ router
.post("/api/:instanceId/workflows", authorized(BUILDER), controller.create) .post("/api/:instanceId/workflows", authorized(BUILDER), controller.create)
.post( .post(
"/api/:instanceId/workflows/action", "/api/:instanceId/workflows/action",
authorized(BUILDER), authorized(EXECUTE_WORKFLOW),
controller.executeAction controller.executeAction
) )
.delete( .delete(