fix: secured requests to /calendar

LJPc-solutions · Jul 25, 2023 · e7c812f · e7c812f
1 parent e1c648a
commit e7c812f
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/LJPcCalendarModule/Http/routes.php b/LJPcCalendarModule/Http/routes.php
@@ -1,11 +1,11 @@
 <?php
 
 Route::group( [ 'middleware' => 'web', 'prefix' => Helper::getSubdirectory(), 'namespace' => 'Modules\LJPcCalendarModule\Http\Controllers' ], function () {
-	Route::get( '/calendar', [ 'uses' => 'LJPcCalendarModuleController@index' ] )->name( 'ljpccalendarmodule.index' );
-	Route::get( '/calendar/ajax', [ 'uses' => 'LJPcCalendarModuleController@getItems' ] )->name( 'ljpccalendarmodule.ajax' );
-	Route::post( '/calendar/ajax', [ 'uses' => 'LJPcCalendarModuleController@ajax' ] )->name( 'ljpccalendarmodule.ajax' );
+		Route::get( '/calendar', [ 'uses' => 'LJPcCalendarModuleController@index', 'middleware' => [ 'auth', 'roles' ], 'roles' => [ 'user', 'admin' ] ] )->name( 'ljpccalendarmodule.index' );
+		Route::get( '/calendar/ajax', [ 'uses' => 'LJPcCalendarModuleController@getItems', 'middleware' => [ 'auth', 'roles' ], 'roles' => [ 'user', 'admin' ] ] )->name( 'ljpccalendarmodule.ajax' );
+		Route::post( '/calendar/ajax', [ 'uses' => 'LJPcCalendarModuleController@ajax', 'middleware' => [ 'auth', 'roles' ], 'roles' => [ 'user', 'admin' ] ] )->name( 'ljpccalendarmodule.ajax' );
 } );
 
 Route::group( [ 'prefix' => Helper::getSubdirectory(), 'namespace' => 'Modules\LJPcCalendarModule\Http\Controllers' ], function () {
-	Route::get( '/calendar/{id}', [ 'uses' => 'LJPcCalendarModuleController@export' ] )->name( 'ljpccalendarmodule.external' );
+		Route::get( '/calendar/{id}', [ 'uses' => 'LJPcCalendarModuleController@export' ] )->name( 'ljpccalendarmodule.external' );
 } );