From bc65f1c64a3e7bde384215ab17ec00ec5347df6a Mon Sep 17 00:00:00 2001
From: mike cullerton <michaelc@cullerton.com>
Date: Thu, 20 Jan 2022 15:43:32 -0500
Subject: [PATCH] Limit modifying reference files to admins

---
 crc/api.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/crc/api.yml b/crc/api.yml
index f0004045..a76ef394 100755
--- a/crc/api.yml
+++ b/crc/api.yml
@@ -1036,6 +1036,8 @@ paths:
                   $ref: "#/components/schemas/File"
     post:
       operationId: crc.api.reference_file.add_reference_file
+      security:
+        - auth_admin: [ 'secret' ]
       summary: Add a new reference file.
       tags:
         - Files
@@ -1079,6 +1081,8 @@ paths:
                 example: '<?xml version="1.0" encoding="UTF-8"?><bpmn:definitions></bpmn:definitions>'
     put:
       operationId: crc.api.reference_file.update_reference_file_info
+      security:
+        - auth_admin: ['secret']
       summary: Update the file_info of a named reference file.
       tags:
         - Files
@@ -1125,6 +1129,8 @@ paths:
                 format: binary
     put:
       operationId: crc.api.reference_file.update_reference_file_data
+      security:
+        - auth_admin: ['secret']
       summary: Update the contents of a reference file
       tags:
         - Files