codeninjasllc/codecombat
1
0
Fork 0
mirror of https://github.com/codeninjasllc/codecombat.git synced 2025-02-17 08:50:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixed problem POSTing UserCodeProblems for non-admins.

Browse source
This commit is contained in:
Nick Winter 2015-01-22 11:30:22 -08:00
parent 0d00917ca0
commit e75e0791d0
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
server/user_code_problems/user_code_problem_handler.coffee
View file

@ -25,7 +25,9 @@ class UserCodeProblemHandler extends Handler
ucp
hasAccess: (req) ->
req.user?.isAdmin() or false
return true if req.user?.isAdmin()
return true if req.method.toLowerCase() is 'post'
false
getByRelationship: (req, res, args...) ->
return @sendForbiddenError res unless @hasAccess req