权限控制

routers/routes/routes.go

@@ -1034,7 +1034,7 @@ func RegisterRoutes(m *macaron.Macaron) {
 			m.Get("", reqRepoDatasetReader, repo.DatasetIndex)
 			m.Get("/reference_datasets", reqRepoDatasetReader, repo.ReferenceDataset)
 			m.Get("/reference_datasets_data", reqRepoDatasetReader, repo.ReferenceDatasetData)
-			m.Delete("/reference_datasets/:id", repo.ReferenceDatasetDelete)
+			m.Delete("/reference_datasets/:id", reqRepoDatasetWriter, repo.ReferenceDatasetDelete)
 			m.Put("/:id/:action", reqRepoDatasetReader, repo.DatasetAction)
 			m.Get("/create", reqRepoDatasetWriter, repo.CreateDataset)
 			m.Post("/create", reqRepoDatasetWriter, bindIgnErr(auth.CreateDatasetForm{}), repo.CreateDatasetPost)