filipg/gonito
1
0
Fork 1
Code Issues 1 Pull Requests Releases Wiki Activity

Secure annotation results page

Browse Source
This commit is contained in:
Karol Kaczmarek 2020-07-11 15:18:02 +02:00
parent ac1c41f586
commit 2847a3bc52
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
Foundation.hs
View File

@ -169,6 +169,11 @@ instance Yesod App where
isAuthorized (ChallengeDiscussionR _) _ = regularAuthorization isAuthorized (ChallengeDiscussionR _) _ = regularAuthorization
isAuthorized (ChallengeDiscussionFeedR _) _ = regularAuthorization isAuthorized (ChallengeDiscussionFeedR _) _ = regularAuthorization
isAuthorized ListAnnotationsR _ = isAdmin
isAuthorized (AnnotationTaskR _) _ = regularAuthorization
isAuthorized (AnnotationTaskDecisionR _ _ _) _ = regularAuthorization
isAuthorized (AnnotationTaskResultsR _) _ = isAdmin
isAuthorized Presentation4RealR _ = regularAuthorization isAuthorized Presentation4RealR _ = regularAuthorization
isAuthorized PresentationPSNC2019R _ = regularAuthorization isAuthorized PresentationPSNC2019R _ = regularAuthorization
isAuthorized GonitoInClassR _ = regularAuthorization isAuthorized GonitoInClassR _ = regularAuthorization

2
config/routes
View File

@ -30,7 +30,7 @@
-- trigger by JSON payload (from e.g. GitLab or Gogs) -- trigger by JSON payload (from e.g. GitLab or Gogs)
/trigger-by-webhook/#Text/#Text TriggerByWebhookR POST /trigger-by-webhook/#Text/#Text TriggerByWebhookR POST
/list-anotations ListAnnotationsR GET /list-annotations ListAnnotationsR GET
/annotation/#{AnnotationTaskId} AnnotationTaskR GET /annotation/#{AnnotationTaskId} AnnotationTaskR GET
/annotation/decision/#{AnnotationTaskId}/#{AnnotationItemId}/#{AnnotationLabelId} AnnotationTaskDecisionR POST /annotation/decision/#{AnnotationTaskId}/#{AnnotationItemId}/#{AnnotationLabelId} AnnotationTaskDecisionR POST
/annotation/results/#{AnnotationTaskId} AnnotationTaskResultsR GET /annotation/results/#{AnnotationTaskId} AnnotationTaskResultsR GET