Require login for most things

2 files changed, 10 insertions, 13 deletions

diff --git a/app.js b/app.js
index 43270b09..6302df7a 100644
--- a/app.js
+++ b/app.js
@@ -88,25 +88,23 @@
 
   app.get('/logout', sessions.destroy);
 
-  app.get('/:user/exists', users.exists);
-
-  app.get('/:user.json', users.json);
-
   app.get('/users/new', users["new"]);
 
   app.post('/users', users.create);
 
   app.get('/:user/edit', authorize, users.edit);
 
-  app.post('/:user', users.update);
+  app.post('/:user', authorize, users.update);
 
   app.get('/:user/transactions.json', authorize, transactions.json);
 
-  app.post('/:user/transactions', transactions.create);
+  app.post('/:user/transactions', authorize, transactions.create);
 
   app.get('/:user/report', authorize, transactions.index);
 
-  app.get('/:user', users.show);
+  app.get('/:user', authorize, users.show);
+
+  app.get('/:user.json', authorize, users.json);
 
   app.use(require('connect-assets')({
     src: 'public',
diff --git a/src/app.coffee b/src/app.coffee
index b5736414..9d91f46a 100644
--- a/src/app.coffee
+++ b/src/app.coffee
@@ -43,19 +43,18 @@ app.get('/login', sessions.new)
 app.post('/login', sessions.create)
 app.get('/logout', sessions.destroy)
 
-app.get('/:user/exists', users.exists)
-app.get('/:user.json', users.json)
-
 app.get('/users/new', users.new)
 app.post('/users', users.create)
 
 app.get('/:user/edit', authorize, users.edit)
-app.post('/:user', users.update)
+app.post('/:user', authorize, users.update)
 
 app.get('/:user/transactions.json', authorize, transactions.json)
-app.post('/:user/transactions', transactions.create)
+app.post('/:user/transactions', authorize, transactions.create)
 app.get('/:user/report', authorize, transactions.index)
-app.get('/:user', users.show)
+
+app.get('/:user', authorize, users.show)
+app.get('/:user.json', authorize, users.json)
 
 app.use(require('connect-assets')(src: 'public', servePath: '/'))