Authorize before caching

2 files changed, 4 insertions, 4 deletions

diff --git a/app.js b/app.js
index aabe19f4..74e8611d 100644
--- a/app.js
+++ b/app.js
@@ -122,7 +122,7 @@
 
   app.post('/users', users.create);
 
-  app.get('/:user/edit', cache, authorize, users.edit);
+  app.get('/:user/edit', authorize, cache, users.edit);
 
   app.post('/:user', authorize, users.update);
 
@@ -130,7 +130,7 @@
 
   app.post('/:user/transactions', transactions.create);
 
-  app.get('/:user/report', cache, authorize, transactions.index);
+  app.get('/:user/report', authorize, cache, transactions.index);
 
   app.get('/:user.json', users.json);
 
diff --git a/src/app.coffee b/src/app.coffee
index 94f6cf61..a0ac6334 100644
--- a/src/app.coffee
+++ b/src/app.coffee
@@ -69,12 +69,12 @@ app.get('/logout', sessions.destroy)
 app.get('/users/new', cache, users.new)
 app.post('/users', users.create)
 
-app.get('/:user/edit', cache, authorize, users.edit)
+app.get('/:user/edit', authorize, cache, users.edit)
 app.post('/:user', authorize, users.update)
 
 app.get('/:user/transactions.json', authorize, transactions.json)
 app.post('/:user/transactions', transactions.create)
-app.get('/:user/report', cache, authorize, transactions.index)
+app.get('/:user/report', authorize, cache, transactions.index)
 
 app.get('/:user.json', users.json)
 app.get('/:user', cache, users.show)