views: add missing @login_required restrictionsHEADmaster

Add checks for logged user in folder/add and folder/update
endpoints.

1 files changed, 2 insertions, 0 deletions

diff --git a/ogcp/views.py b/ogcp/views.py
index a624dab..694435f 100644
--- a/ogcp/views.py
+++ b/ogcp/views.py
@@ -1651,6 +1651,7 @@ def action_folder_delete():
 
 @app.route('/action/folder/update', methods=['GET','POST'])
 @handle_server_errors('scopes')
+@login_required
 def action_folder_update():
     form = FolderForm(request.form)
     if request.method == 'POST':
@@ -1705,6 +1706,7 @@ def action_folder_add():
 
 @app.route('/action/folder/add', methods=['POST'])
 @handle_server_errors('scopes')
+@login_required
 def action_folder_add_post():
     form = FolderForm(request.form)
     payload = {"name": form.name.data}