From 9046a9940ba331d6eb974acab1f0618373b4c608 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B6rn=20Fromme?= <fromme@dreipunktnull.com>
Date: Wed, 18 Dec 2024 18:25:45 +0100
Subject: [PATCH] fix: ensure authenticated uploads

---
 config/packages/security.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/packages/security.yaml b/config/packages/security.yaml
index 560c7a3..6ddcd34 100644
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -32,6 +32,7 @@ security:
                 token_provider:
                     doctrine: true
     access_control:
+        - { path: '^/_uploader', roles: ROLE_USER, requires_channel: https }
         - { path: '^/', roles: PUBLIC_ACCESS, requires_channel: https }
 
 when@test: