From e5ab8d77583e7a0f9712724608dbc7a8d0df6d4f Mon Sep 17 00:00:00 2001
From: Gregoo <versatile.mailbox@gmail.com>
Date: Wed, 29 Jan 2025 17:41:34 +0100
Subject: [PATCH] Add missing @login_required for set deletion

---
 bricktracker/views/set.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bricktracker/views/set.py b/bricktracker/views/set.py
index d82896c..809d46b 100644
--- a/bricktracker/views/set.py
+++ b/bricktracker/views/set.py
@@ -73,6 +73,7 @@ def delete(*, id: str) -> str:
 
 # Actually delete of a set
 @set_page.route('/<id>/delete', methods=['POST'])
+@login_required
 @exception_handler(__file__, post_redirect='set.delete')
 def do_delete(*, id: str) -> Response:
     brickset = BrickSet().select_light(id)
@@ -89,6 +90,7 @@ def do_delete(*, id: str) -> Response:
 
 # Set is deleted
 @set_page.route('/<id>/deleted', methods=['GET'])
+@login_required
 @exception_handler(__file__)
 def deleted(*, id: str) -> str:
     return render_template(
@@ -155,6 +157,7 @@ def missing_part(
 
 # Refresh a set
 @set_page.route('/<id>/refresh', methods=['GET'])
+@login_required
 @exception_handler(__file__)
 def refresh(*, id: str) -> str:
     return render_template(