M17–M19: #133–#137 (Kommentare inline, Statuszeile, Transklusion, Excalidraw, Checkbox-Fix) #138
@ -1,6 +1,7 @@
|
||||
import { Controller, Get, Param, Req } from '@nestjs/common';
|
||||
|
||||
import { AuthedRequest } from '../auth/auth.guard';
|
||||
import { AuthenticatedOnly } from '../permissions/permission.decorators';
|
||||
import { PublicPageContent, PublicService } from './public.service';
|
||||
|
||||
/**
|
||||
@ -16,7 +17,10 @@ import { PublicPageContent, PublicService } from './public.service';
|
||||
export class ReadContentController {
|
||||
constructor(private readonly publicPages: PublicService) {}
|
||||
|
||||
// Session required (explicit access rule, issue #52); per-page read
|
||||
// permission is enforced in the service (resolve → canAccessPage → 404).
|
||||
@Get(':pondSlug/:pageSlug')
|
||||
@AuthenticatedOnly()
|
||||
async content(
|
||||
@Param('pondSlug') pondSlug: string,
|
||||
@Param('pageSlug') pageSlug: string,
|
||||
|
||||
Loading…
Reference in New Issue
Block a user