Skip to content

Commit 36038fd

Browse files
authored
fix: add security middleware to get users endpoint (#59)
Signed-off-by: romanetar <roman_ag@hotmail.com>
1 parent 46010f0 commit 36038fd

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

routes/web.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -181,7 +181,7 @@
181181
Route::group(['prefix' => 'users'], function () {
182182

183183
Route::delete('/me/tokens/{value}', "UserApiController@revokeMyToken");
184-
Route::get('', "UserApiController@getAll");
184+
Route::get('', ['middleware' => ['openstackid.currentuser.serveradmin.json'], 'uses' => "UserApiController@getAll"]);
185185
Route::post('', ['middleware' => ['openstackid.currentuser.serveradmin.json'], 'uses' => "UserApiController@create"]);
186186
Route::group(['prefix' => 'me'], function () {
187187
Route::put('', "UserApiController@updateMe");
@@ -236,7 +236,7 @@
236236
Route::post('', 'ClientApiController@create');
237237

238238
Route::group(['prefix' => '{id}'], function () {
239-
Route::get('', "ClientApiController@get");
239+
Route::get('', array('middleware' => ['oauth2.currentuser.allow.client.edition'], 'uses' => "ClientApiController@get"));
240240
Route::put('', array('middleware' => ['oauth2.currentuser.allow.client.edition'], 'uses' => 'ClientApiController@update'));
241241
Route::delete('', array('middleware' => ['oauth2.currentuser.owns.client'], 'uses' => 'ClientApiController@delete'));
242242
// particular settings

0 commit comments

Comments
 (0)