Allow create scope for media uploads

2023-02-19 16:37:52 +11:00
parent a71371209b
commit 4495a715f1
1 changed files with 1 additions and 1 deletions
--- a/app/actions/media/create.rb
+++ b/app/actions/media/create.rb
@@ -8,7 +8,7 @@ module Adamantium
        def handle(req, res)
          data = req.params[:file]

-          halt 401 unless verify_scope(req: req, scope: :media)
+          halt 401 unless verify_scope(req: req, scope: :create) || verify_scope(req: req, scope: :media)

          upload_result = upload.call(file: data)