Only admins can delete blog posts

2014-03-28 01:24:41 -07:00 · 2014-03-28 01:24:41 -07:00 · 19034f5b69
commit 19034f5b69
parent f9c2481499
1 changed files with 1 additions and 0 deletions
--- a/rophako/modules/blog.py
+++ b/rophako/modules/blog.py
@ -192,6 +192,7 @@ def update():


@mod.route("/delete", methods=["GET", "POST"])
+@admin_required
 def delete():
    """Delete a blog post."""
    post_id = request.args.get("id")