From cdd46d6134b73ba729878c07c6f7a82a724a9be8 Mon Sep 17 00:00:00 2001
From: BonfaceKilz
Date: Tue, 24 May 2022 12:48:03 +0300
Subject: Make sure the user is logged in when approving data

---
 wqflask/wqflask/metadata_edits.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/wqflask/wqflask/metadata_edits.py b/wqflask/wqflask/metadata_edits.py
index 8b3fd861..74f1cd15 100644
--- a/wqflask/wqflask/metadata_edits.py
+++ b/wqflask/wqflask/metadata_edits.py
@@ -810,6 +810,7 @@ def reject_case_attribute_data():
 
 @metadata_edit.route("/case-attributes/approve", methods=["POST", ])
 @case_attributes_edit_access
+@login_required
 def approve_case_attribute_data():
     case_attr_id = request.form.to_dict().get("id")
     with database_connection() as conn:
-- 
cgit v1.2.3