❗️ fix permissions on mission api routes #33

cadus · Apr 28, 2017 · 60a3ef2 · 60a3ef2
1 parent ddaf5ff
commit 60a3ef2
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/routes/index.js b/routes/index.js
@@ -23,9 +23,9 @@ exports = module.exports = (app) => {
    app.get('/volunteer/:token', api.volunteers.setToken);
 
    app.get('/api/missions', keystone.middleware.api, isAdmin, api.missions.all);
-   app.post('/api/missions', keystone.middleware.api, api.missions.create);
-   app.get('/api/missions/:id', keystone.middleware.api, hasToken, api.missions.one);
-   app.put('/api/missions/:id', keystone.middleware.api, hasToken, api.missions.update);
+   app.post('/api/missions', keystone.middleware.api, isAdmin, api.missions.create);
+   app.get('/api/missions/:id', keystone.middleware.api, isAdmin, api.missions.one);
+   app.put('/api/missions/:id', keystone.middleware.api, isAdmin, api.missions.update);
 
    app.get('/api/volunteers', keystone.middleware.api, isAdmin, api.volunteers.all);
    app.get('/api/volunteer', keystone.middleware.api, hasToken, api.volunteers.one);