added missin authorization attribute

6 years ago · d026abc440
1 changed files with 1 additions and 0 deletions
--- a/modules/cms-kit/src/Volo.CmsKit.Admin.HttpApi/Volo/CmsKit/Admin/MediaDescriptors/MediaDescriptorAdminController.cs
+++ b/modules/cms-kit/src/Volo.CmsKit.Admin.HttpApi/Volo/CmsKit/Admin/MediaDescriptors/MediaDescriptorAdminController.cs
@ -25,6 +25,7 @@ namespace Volo.CmsKit.Admin.MediaDescriptors
        }

        [HttpPost]
+        [Authorize(CmsKitAdminPermissions.MediaDescriptors.Create)]
        [NonAction]
        public virtual Task<MediaDescriptorDto> CreateAsync(CreateMediaInputStream inputStream)
        {