X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/514836a4979b655796190d60aa4bda22f9cdc7f9..5bac49c51fcd8a619f0ae515ce734aa9ca31e43b:/app/controllers/api/user_preferences_controller.rb?ds=sidebyside

diff --git a/app/controllers/api/user_preferences_controller.rb b/app/controllers/api/user_preferences_controller.rb
index 99d224c51..cb852ce88 100644
--- a/app/controllers/api/user_preferences_controller.rb
+++ b/app/controllers/api/user_preferences_controller.rb
@@ -1,6 +1,7 @@
 # Update and read user preferences, which are arbitrary key/val pairs
 module Api
   class UserPreferencesController < ApiController
+    before_action :check_api_writable, :only => [:update_all, :update, :destroy]
     before_action :authorize
 
     authorize_resource