merge

1 files changed, 9 insertions, 4 deletions

diff --git a/server/index.js b/server/index.js
index 1858825..e9efef0 100644
--- a/server/index.js
+++ b/server/index.js
@@ -117,12 +117,17 @@ site.route = function () {
 	app.get('/layout', middleware.ensureAuthenticated, middleware.ensureIsStaff, views.modal)
 	app.get('/layout/:name', middleware.ensureAuthenticated, middleware.ensureIsStaff, views.builder)
 
+	app.get('/join/:nonce', middleware.ensureAuthenticated, api.collaborator.join)
+	app.get('/api/collaborator/:slug/index', middleware.ensureAuthenticated, middleware.ensureProject, api.collaborator.index)
+	app.post('/api/collaborator/:slug/create', middleware.ensureAuthenticated, middleware.ensureProject, api.collaborator.create)
+	app.delete('/api/collaborator/:slug/destroy', middleware.ensureAuthenticated, middleware.ensureProject, api.collaborator.destroy)
+
 	app.get('/project', middleware.ensureAuthenticated, views.modal)
 	app.get('/project/new', middleware.ensureAuthenticated, views.modal)
-	app.get('/project/new/:layout', middleware.ensureAuthenticated, views.editor)
-	app.get('/project/:slug', middleware.ensureProject, views.reader)
-	app.get('/project/:slug/view', middleware.ensureProject, views.reader)
-	app.get('/project/:slug/edit', middleware.ensureProject, views.editor)
+	app.get('/project/new/:layout', middleware.ensureAuthenticated, views.editor_new)
+	app.get('/project/:slug', middleware.ensureProject, middleware.ensureIsCollaborator, views.reader)
+	app.get('/project/:slug/view', middleware.ensureProject, middleware.ensureIsCollaborator, views.reader)
+	app.get('/project/:slug/edit', middleware.ensureProject, middleware.ensureIsCollaborator, views.editor)
 
 	app.get('/api/layout', middleware.ensureAuthenticated, api.layouts.index)
 	app.get('/api/layout/:slug', middleware.ensureAuthenticated, api.layouts.show)