Merge pull request #7262 from overleaf/jpa-missing-required-login

[web] require a logged in user for (un-)archiving/(un-)trashing projects

GitOrigin-RevId: 90e6d1654065d759dce612bd6714e6e0018b19ff
This commit is contained in:
Alf Eaton
2022-04-05 12:16:58 +00:00
committed by Copybot
parent 103e31163a
commit 2130aeb6f9
+4
View File
@@ -530,21 +530,25 @@ function initialize(webRouter, privateApiRouter, publicApiRouter) {
webRouter.post(
'/Project/:Project_id/archive',
AuthenticationController.requireLogin(),
AuthorizationMiddleware.ensureUserCanReadProject,
ProjectController.archiveProject
)
webRouter.delete(
'/Project/:Project_id/archive',
AuthenticationController.requireLogin(),
AuthorizationMiddleware.ensureUserCanReadProject,
ProjectController.unarchiveProject
)
webRouter.post(
'/project/:project_id/trash',
AuthenticationController.requireLogin(),
AuthorizationMiddleware.ensureUserCanReadProject,
ProjectController.trashProject
)
webRouter.delete(
'/project/:project_id/trash',
AuthenticationController.requireLogin(),
AuthorizationMiddleware.ensureUserCanReadProject,
ProjectController.untrashProject
)