From bba3ba38ec86ea98a456f56c596c9f8006e7516b Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Sat, 23 Aug 2014 00:11:30 -0700 Subject: Authorize before caching --- app.js | 4 ++-- src/app.coffee | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/app.js b/app.js index aabe19f4..74e8611d 100644 --- a/app.js +++ b/app.js @@ -122,7 +122,7 @@ app.post('/users', users.create); - app.get('/:user/edit', cache, authorize, users.edit); + app.get('/:user/edit', authorize, cache, users.edit); app.post('/:user', authorize, users.update); @@ -130,7 +130,7 @@ app.post('/:user/transactions', transactions.create); - app.get('/:user/report', cache, authorize, transactions.index); + app.get('/:user/report', authorize, cache, transactions.index); app.get('/:user.json', users.json); diff --git a/src/app.coffee b/src/app.coffee index 94f6cf61..a0ac6334 100644 --- a/src/app.coffee +++ b/src/app.coffee @@ -69,12 +69,12 @@ app.get('/logout', sessions.destroy) app.get('/users/new', cache, users.new) app.post('/users', users.create) -app.get('/:user/edit', cache, authorize, users.edit) +app.get('/:user/edit', authorize, cache, users.edit) app.post('/:user', authorize, users.update) app.get('/:user/transactions.json', authorize, transactions.json) app.post('/:user/transactions', transactions.create) -app.get('/:user/report', cache, authorize, transactions.index) +app.get('/:user/report', authorize, cache, transactions.index) app.get('/:user.json', users.json) app.get('/:user', cache, users.show) -- cgit v1.2.3