fix(metadata): modify permissions check on edit

PlaceOS · Jan 13, 2025 · 4bb8ccd · 4bb8ccd
1 parent 3767664
commit 4bb8ccd
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/placeos-rest-api/controllers/metadata.cr b/src/placeos-rest-api/controllers/metadata.cr
@@ -19,9 +19,9 @@ module PlaceOS::Api
     ###############################################################################################
 
     # Does the user making the request have permissions to modify the data
-    @[AC::Route::Filter(:before_action, only: [:destroy])]
-    def check_delete_permissions(
-      @[AC::Param::Info(name: "id", description: "the parent id of the metadata to be destroyed")]
+    @[AC::Route::Filter(:before_action, only: [:update, :destroy])]
+    def check_modify_permissions(
+      @[AC::Param::Info(name: "id", description: "the parent id of the metadata to be modified")]
       parent_id : String
     )
       return if user_support? || parent_id == user_token.id