From 86d13ec2aa94ec10810ddf9c8b33314bd4968791 Mon Sep 17 00:00:00 2001
From: Chocobozzz <florian.bigard@gmail.com>
Date: Wed, 29 Nov 2017 13:18:05 +0100
Subject: Users list only available when use is authenticated

And has a special right
---
 server/controllers/api/users.ts | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'server/controllers')

diff --git a/server/controllers/api/users.ts b/server/controllers/api/users.ts
index 721b23301..f9b871724 100644
--- a/server/controllers/api/users.ts
+++ b/server/controllers/api/users.ts
@@ -48,6 +48,8 @@ usersRouter.get('/me/videos/:videoId/rating',
 )
 
 usersRouter.get('/',
+  authenticate,
+  ensureUserHasRight(UserRight.MANAGE_USERS),
   paginationValidator,
   usersSortValidator,
   setUsersSort,
-- 
cgit v1.2.3