From 05a5a52c8e76cefa6da054f2b1805e0aa230ffb7 Mon Sep 17 00:00:00 2001
From: Sebastian Serth <Sebastian.Serth@hpi.de>
Date: Fri, 1 Sep 2023 22:18:03 +0200
Subject: [PATCH] Require user for InternalUsersController

Fixes CODEOCEAN-TG
---
 app/controllers/internal_users_controller.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/controllers/internal_users_controller.rb b/app/controllers/internal_users_controller.rb
index cc3cf730..9bc96e83 100644
--- a/app/controllers/internal_users_controller.rb
+++ b/app/controllers/internal_users_controller.rb
@@ -3,6 +3,7 @@
 class InternalUsersController < ApplicationController
   include CommonBehavior
 
+  before_action :require_user!, except: %i[activate forgot_password reset_password]
   before_action :require_activation_token, only: :activate
   before_action :require_reset_password_token, only: :reset_password
   before_action :set_user, only: MEMBER_ACTIONS