Fix: Add tag only by admin

2021-12-12 13:03:36 +08:00
parent af444f0bbb
commit d2c852d57a
1 changed files with 7 additions and 1 deletions
--- a/pkg/api/handle_tag.go
+++ b/pkg/api/handle_tag.go
@@ -39,8 +39,14 @@ type InsertTagResponse struct {
 }

 func (api *API) HandleInsertTag(w http.ResponseWriter, r *http.Request) {
+	// check if user is admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		return
+	}
+
 	var req InsertTagRequest
-	err := json.NewDecoder(r.Body).Decode(&req)
+	err = json.NewDecoder(r.Body).Decode(&req)
 	if err != nil {
 		api.HandleError(w, r, err)
 		return