diff --git a/app/actions/media/create.rb b/app/actions/media/create.rb index cf0bbb9..e62bfbd 100644 --- a/app/actions/media/create.rb +++ b/app/actions/media/create.rb @@ -8,7 +8,7 @@ module Adamantium def handle(req, res) data = req.params[:file] - halt 401 unless verify_scope(req: req, scope: :media) + halt 401 unless verify_scope(req: req, scope: :create) || verify_scope(req: req, scope: :media) upload_result = upload.call(file: data)