about summary refs log tree commit diff
path: root/app/controllers/api/v1/admin/trends/tags_controller.rb
diff options
context:
space:
mode:
Diffstat (limited to 'app/controllers/api/v1/admin/trends/tags_controller.rb')
-rw-r--r--app/controllers/api/v1/admin/trends/tags_controller.rb3
1 files changed, 3 insertions, 0 deletions
diff --git a/app/controllers/api/v1/admin/trends/tags_controller.rb b/app/controllers/api/v1/admin/trends/tags_controller.rb
index 3653d1dd1..4815af31e 100644
--- a/app/controllers/api/v1/admin/trends/tags_controller.rb
+++ b/app/controllers/api/v1/admin/trends/tags_controller.rb
@@ -1,6 +1,9 @@
 # frozen_string_literal: true
 
 class Api::V1::Admin::Trends::TagsController < Api::BaseController
+  protect_from_forgery with: :exception
+
+  before_action -> { authorize_if_got_token! :'admin:read' }
   before_action :require_staff!
   before_action :set_tags