From: Tom Hughes <tom@compton.nu>
Date: Sun, 24 Nov 2013 15:29:38 +0000 (+0000)
Subject: Make sure all pages using the map layout call require_oauth
X-Git-Tag: live~4657^2~23
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/532d1085369e8bed5eb7bd2fc9cb1d81b63027ac

Make sure all pages using the map layout call require_oauth
---

diff --git a/app/controllers/browse_controller.rb b/app/controllers/browse_controller.rb
index cdcd90610..e16ec2914 100644
--- a/app/controllers/browse_controller.rb
+++ b/app/controllers/browse_controller.rb
@@ -4,6 +4,7 @@ class BrowseController < ApplicationController
   before_filter :authorize_web  
   before_filter :set_locale 
   before_filter { |c| c.check_database_readable(true) }
+  before_filter :require_oauth
   around_filter :web_timeout
 
   def relation
diff --git a/app/controllers/changeset_controller.rb b/app/controllers/changeset_controller.rb
index 63f9f0f7d..e0facfa93 100644
--- a/app/controllers/changeset_controller.rb
+++ b/app/controllers/changeset_controller.rb
@@ -269,6 +269,7 @@ class ChangesetController < ApplicationController
     end
 
     if request.format == :html and !params[:bbox]
+      require_oauth
       render :action => :history, :layout => map_layout
     else
       changesets = conditions_nonempty(Changeset.all)