From 4495a715f1f8d914667b4173f131f9916acd7deb Mon Sep 17 00:00:00 2001 From: Daniel Nitsikopoulos Date: Sun, 19 Feb 2023 16:37:52 +1100 Subject: [PATCH] Allow create scope for media uploads --- app/actions/media/create.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/actions/media/create.rb b/app/actions/media/create.rb index cf0bbb9..e62bfbd 100644 --- a/app/actions/media/create.rb +++ b/app/actions/media/create.rb @@ -8,7 +8,7 @@ module Adamantium def handle(req, res) data = req.params[:file] - halt 401 unless verify_scope(req: req, scope: :media) + halt 401 unless verify_scope(req: req, scope: :create) || verify_scope(req: req, scope: :media) upload_result = upload.call(file: data)