From: Andy Allan <git@gravitystorm.co.uk>
Date: Wed, 29 May 2024 13:32:12 +0000 (+0100)
Subject: Add api_status checks for user preferences API
X-Git-Tag: live~430^2~4
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/91fc588556fa24b1fd1735fffacb7ec9d01ff1da?hp=ed15352f56403caf0e0485474d872525a47d2d91

Add api_status checks for user preferences API
---

diff --git a/app/controllers/api/user_preferences_controller.rb b/app/controllers/api/user_preferences_controller.rb
index 99d224c51..db779a35e 100644
--- a/app/controllers/api/user_preferences_controller.rb
+++ b/app/controllers/api/user_preferences_controller.rb
@@ -1,6 +1,8 @@
 # Update and read user preferences, which are arbitrary key/val pairs
 module Api
   class UserPreferencesController < ApiController
+    before_action :check_api_readable
+    before_action :check_api_writable, :only => [:update_all, :update, :destroy]
     before_action :authorize
 
     authorize_resource