From d2873672838bc3ce32064b987fe823c80408ce26 Mon Sep 17 00:00:00 2001
From: Elias Jansson <elias.jansson@gmail.com>
Date: Tue, 27 Jan 2026 20:57:06 +0100
Subject: [PATCH] Securty

---
 Aberwyn/Controllers/RssController.cs | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/Aberwyn/Controllers/RssController.cs b/Aberwyn/Controllers/RssController.cs
index 848fa76..2b88cb1 100644
--- a/Aberwyn/Controllers/RssController.cs
+++ b/Aberwyn/Controllers/RssController.cs
@@ -1,5 +1,6 @@
 using Aberwyn.Data;
 using BencodeNET.Torrents;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 
@@ -24,7 +25,7 @@ public class RssController : Controller
         _movieMetadataService = movieMetadataService;
         _context = context;
     }
-
+    [Authorize(Roles = "Admin")]
     [HttpGet]
     public async Task<IActionResult> Index(int page = 1, string sort = "date", string range = "all")
     {
@@ -105,7 +106,7 @@ public class RssController : Controller
     }
 
 
-
+    [Authorize(Roles = "Admin")]
     [HttpPost]
     public async Task<IActionResult> Add(string torrentUrl)
     {
@@ -164,7 +165,7 @@ public class RssController : Controller
     }
 
 
-
+    [Authorize(Roles = "Admin")]
     [HttpPost]
     [ValidateAntiForgeryToken]
     public async Task<IActionResult> Upload(TorrentUploadViewModel model)
@@ -211,7 +212,7 @@ public class RssController : Controller
             return View("Index", model);
         }
     }
-
+    [Authorize(Roles = "Admin")]
     [HttpPost]
     [ValidateAntiForgeryToken]
     public async Task<IActionResult> RefreshStats(string infoHash, string scrapeUrl)