diff --git a/handler/api/api.go b/handler/api/api.go index 9e7908218..78296e6ac 100644 --- a/handler/api/api.go +++ b/handler/api/api.go @@ -294,6 +294,9 @@ func (s Server) Handler() http.Handler { r.Get("/{build}", card.HandleFindAll(s.Builds, s.Card, s.Repos)) r.Get("/{build}/{stage}/{step}", card.HandleFind(s.Builds, s.Card, s.Stages, s.Steps, s.Repos)) r.Get("/{build}/{stage}/{step}/json", card.HandleFindData(s.Builds, s.Card, s.Stages, s.Steps, s.Repos)) + r.With( + acl.CheckAdminAccess(), + ).Post("/{build}/{stage}/{step}", card.HandleCreate(s.Builds, s.Card, s.Stages, s.Steps, s.Repos)) r.With( acl.CheckAdminAccess(), ).Delete("/{build}/{stage}/{step}", card.HandleDelete(s.Builds, s.Card, s.Stages, s.Steps, s.Repos))