Secure annotation results page

This commit is contained in:
Karol Kaczmarek 2020-07-11 15:18:02 +02:00
parent ac1c41f586
commit 2847a3bc52
2 changed files with 6 additions and 1 deletions

View File

@ -169,6 +169,11 @@ instance Yesod App where
isAuthorized (ChallengeDiscussionR _) _ = regularAuthorization
isAuthorized (ChallengeDiscussionFeedR _) _ = regularAuthorization
isAuthorized ListAnnotationsR _ = isAdmin
isAuthorized (AnnotationTaskR _) _ = regularAuthorization
isAuthorized (AnnotationTaskDecisionR _ _ _) _ = regularAuthorization
isAuthorized (AnnotationTaskResultsR _) _ = isAdmin
isAuthorized Presentation4RealR _ = regularAuthorization
isAuthorized PresentationPSNC2019R _ = regularAuthorization
isAuthorized GonitoInClassR _ = regularAuthorization

View File

@ -30,7 +30,7 @@
-- trigger by JSON payload (from e.g. GitLab or Gogs)
/trigger-by-webhook/#Text/#Text TriggerByWebhookR POST
/list-anotations ListAnnotationsR GET
/list-annotations ListAnnotationsR GET
/annotation/#{AnnotationTaskId} AnnotationTaskR GET
/annotation/decision/#{AnnotationTaskId}/#{AnnotationItemId}/#{AnnotationLabelId} AnnotationTaskDecisionR POST
/annotation/results/#{AnnotationTaskId} AnnotationTaskResultsR GET