changing admin API calls to return 404 if unauthenticated, and redirect user to login for regular URL. closes #1885

This commit is contained in:
Julian Lam
2014-08-31 22:43:00 -04:00
parent 7572c9a803
commit 08c9cbdf70
4 changed files with 8 additions and 3 deletions

View File

@@ -16,7 +16,9 @@ var app,
middleware.isAdmin = function(req, res, next) {
if (!req.user) {
return res.redirect(nconf.get('relative_path') + '/login?next=admin');
return res.json(404, {
error: 'not-found'
});
}
user.isAdministrator((req.user && req.user.uid) ? req.user.uid : 0, function (err, isAdmin) {