Merge pull request canonical#14205 from canonical/add-permission-on-i…

…ssuing-badge chore: restrict badge issuing api to credential admins
abhigyanghosh30 · Aug 20, 2024 · 725a8ea · 725a8ea
2 parents 142c577 + c6f6e6c
commit 725a8ea
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/webapp/shop/cred/views.py b/webapp/shop/cred/views.py
@@ -1202,7 +1202,7 @@ def fetch_assessments(page: int):
 
 
 @shop_decorator(area="cred", permission="user", response="json")
-@credentials_group()
+@credentials_admin()
 def issue_credly_badge(credly_api, **kwargs):
     badge_data = flask.request.json
     try: