Make sure all pages using the map layout call require_oauth

diff --git a/app/controllers/browse_controller.rb b/app/controllers/browse_controller.rb
index cdcd906106392e8c612eb00bb0c63d9d9df992ca..e16ec29147bffe4a2c84b2cb8e407b150cf30603 100644 (file)
--- a/app/controllers/browse_controller.rb
+++ b/app/controllers/browse_controller.rb
@@ -4,6 +4,7 @@ class BrowseController < ApplicationController
   before_filter :authorize_web  
   before_filter :set_locale 
   before_filter { |c| c.check_database_readable(true) }
+  before_filter :require_oauth
   around_filter :web_timeout
 
   def relation

diff --git a/app/controllers/changeset_controller.rb b/app/controllers/changeset_controller.rb
index 63f9f0f7d4745aceb943f1965ce39ffd60ee954e..e0facfa932fc234580b17aba5fa16594639dbe9d 100644 (file)
--- a/app/controllers/changeset_controller.rb
+++ b/app/controllers/changeset_controller.rb
@@ -269,6 +269,7 @@ class ChangesetController < ApplicationController
     end
 
     if request.format == :html and !params[:bbox]
+      require_oauth
       render :action => :history, :layout => map_layout
     else
       changesets = conditions_nonempty(Changeset.all)