Update requires protected access

blankstorm · Oct 5, 2024 · 4250d68 · 4250d68
1 parent 6b9e42a
commit 4250d68
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/functions/account/update.ts b/functions/account/update.ts
@@ -3,6 +3,7 @@ import { AccountType, accountAttributes, stripAccountInfo, type FullAccount } fr
 import { setAccountAttribute, setDB } from '../../src/backend/api';
 import type { RequestContext } from '../../src/backend/context';
 import { checkAuth, checkBody, error, getAccountFromTokenOrID, parseError, response } from '../../src/backend/utils';
+import { Access } from '../../src/generic';
 
 export { onRequestOptions } from '../../src/backend/utils';
 
@@ -32,6 +33,7 @@ export async function onRequest({ env, request }: RequestContext): Promise<Respo
 			target,
 			allowIfSame: ['username', 'email'].includes(body.key),
 			requiredType: requiredTypeForChange[body.key],
+			access: Access.PROTECTED,
 		});
 
 		try {