From d7dd7e3c81a88ff54e96e588fd7cccf4a159a144 Mon Sep 17 00:00:00 2001 From: bergquist Date: Tue, 24 Oct 2017 11:00:23 +0200 Subject: [PATCH] alerting: only editors can pause rules closes #9640 --- pkg/api/api.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/api/api.go b/pkg/api/api.go index 8c91120facc..ba5e7ae4e10 100644 --- a/pkg/api/api.go +++ b/pkg/api/api.go @@ -267,7 +267,7 @@ func (hs *HttpServer) registerRoutes() { apiRoute.Group("/alerts", func(alertsRoute RouteRegister) { alertsRoute.Post("/test", bind(dtos.AlertTestCommand{}), wrap(AlertTest)) - alertsRoute.Post("/:alertId/pause", bind(dtos.PauseAlertCommand{}), wrap(PauseAlert), reqEditorRole) + alertsRoute.Post("/:alertId/pause", reqEditorRole, bind(dtos.PauseAlertCommand{}), wrap(PauseAlert)) alertsRoute.Get("/:alertId", ValidateOrgAlert, wrap(GetAlert)) alertsRoute.Get("/", wrap(GetAlerts)) alertsRoute.Get("/states-for-dashboard", wrap(GetAlertStatesForDashboard))