From ba425c5a9cc77d333c8761f6137b27fe8a070f93 Mon Sep 17 00:00:00 2001
From: undefined <i@undefined.moe>
Date: Mon, 20 Dec 2021 13:31:08 +0800
Subject: [PATCH] core: blog: check PRIV_USER_PROFILE

---
 packages/hydrooj/package.json        | 2 +-
 packages/hydrooj/src/handler/blog.ts | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/hydrooj/package.json b/packages/hydrooj/package.json
index 64ca573fb..0e38484df 100644
--- a/packages/hydrooj/package.json
+++ b/packages/hydrooj/package.json
@@ -1,6 +1,6 @@
 {
     "name": "hydrooj",
-    "version": "3.2.23",
+    "version": "3.2.24",
     "bin": "bin/hydrooj.js",
     "main": "src/loader",
     "module": "src/loader",
diff --git a/packages/hydrooj/src/handler/blog.ts b/packages/hydrooj/src/handler/blog.ts
index d521b0bfe..9c0068bd0 100644
--- a/packages/hydrooj/src/handler/blog.ts
+++ b/packages/hydrooj/src/handler/blog.ts
@@ -121,9 +121,9 @@ class BlogEditHandler extends BlogHandler {
 
 export async function apply() {
     Route('blog_main', '/blog/:uid', BlogUserHandler);
-    Route('blog_create', '/blog/:uid/create', BlogEditHandler);
+    Route('blog_create', '/blog/:uid/create', BlogEditHandler, PRIV.PRIV_USER_PROFILE);
     Route('blog_detail', '/blog/:uid/:did', BlogDetailHandler);
-    Route('blog_edit', '/blog/:uid/:did/edit', BlogEditHandler);
+    Route('blog_edit', '/blog/:uid/:did/edit', BlogEditHandler, PRIV.PRIV_USER_PROFILE);
 }
 
 global.Hydro.handler.blog = apply;