From 7da69f05b80dc1ff7ffcebb57f055f891fd14b17 Mon Sep 17 00:00:00 2001
From: Sebastian Serth <Sebastian.Serth@hpi.de>
Date: Mon, 14 Dec 2020 10:15:20 +0100
Subject: [PATCH] Require user for all actions in /external_users

---
 app/controllers/external_users_controller.rb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app/controllers/external_users_controller.rb b/app/controllers/external_users_controller.rb
index a7d39341..7b3e1a91 100644
--- a/app/controllers/external_users_controller.rb
+++ b/app/controllers/external_users_controller.rb
@@ -1,4 +1,6 @@
 class ExternalUsersController < ApplicationController
+  before_action :require_user!
+
   def authorize!
     authorize(@user || @users)
   end