add security to site template API

2020-05-12 14:31:18 -04:00
parent 6f3fe8d933
commit f05c7d79e3
1 changed files with 3 additions and 0 deletions
--- a/Oqtane.Server/Controllers/SiteTemplateController.cs
+++ b/Oqtane.Server/Controllers/SiteTemplateController.cs
@ -1,7 +1,9 @@
 using System.Collections.Generic;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Oqtane.Models;
 using Oqtane.Repository;
+using Oqtane.Shared;

 namespace Oqtane.Controllers
 {
@ -17,6 +19,7 @@ namespace Oqtane.Controllers

        // GET: api/<controller>
        [HttpGet]
+        [Authorize(Roles = Constants.HostRole)]
        public IEnumerable<SiteTemplate> Get()
        {
            return _siteTemplates.GetSiteTemplates();