From be77f29b3b7c1e35b5710c1c06e21b4323893770 Mon Sep 17 00:00:00 2001
From: tianlinzhong <673359306@qq.com>
Date: Tue, 7 Dec 2021 14:35:41 +0800
Subject: [PATCH] point of access_control

---
 myems-api/core/point.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/myems-api/core/point.py b/myems-api/core/point.py
index dd9c993b..fb7f8eab 100644
--- a/myems-api/core/point.py
+++ b/myems-api/core/point.py
@@ -64,6 +64,7 @@ class PointCollection:
     @user_logger
     def on_post(req, resp):
         """Handles POST requests"""
+        access_control(req)
         try:
             raw_json = req.stream.read().decode('utf-8')
         except Exception as ex:
@@ -255,6 +256,7 @@ class PointItem:
     @staticmethod
     @user_logger
     def on_delete(req, resp, id_):
+        access_control(req)
         if not id_.isdigit() or int(id_) <= 0:
             raise falcon.HTTPError(falcon.HTTP_400, title='API.BAD_REQUEST',
                                    description='API.INVALID_POINT_ID')
@@ -395,6 +397,7 @@ class PointItem:
     @user_logger
     def on_put(req, resp, id_):
         """Handles PUT requests"""
+        access_control(req)
         try:
             raw_json = req.stream.read().decode('utf-8')
         except Exception as ex: