From d2c852d57a1006f6afb076f3e0903be6c6ee547f Mon Sep 17 00:00:00 2001
From: heimoshuiyu <heimoshuiyu@gmail.com>
Date: Sun, 12 Dec 2021 13:03:36 +0800
Subject: [PATCH] Fix: Add tag only by admin

---
 pkg/api/handle_tag.go | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/pkg/api/handle_tag.go b/pkg/api/handle_tag.go
index 69b1a60..39550ec 100644
--- a/pkg/api/handle_tag.go
+++ b/pkg/api/handle_tag.go
@@ -39,8 +39,14 @@ type InsertTagResponse struct {
 }
 
 func (api *API) HandleInsertTag(w http.ResponseWriter, r *http.Request) {
+	// check if user is admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		return
+	}
+
 	var req InsertTagRequest
-	err := json.NewDecoder(r.Body).Decode(&req)
+	err = json.NewDecoder(r.Body).Decode(&req)
 	if err != nil {
 		api.HandleError(w, r, err)
 		return