split up api module

1 files changed, 5 insertions, 6 deletions

diff --git a/server/index.js b/server/index.js
index b2fb568..005b0cd 100644
--- a/server/index.js
+++ b/server/index.js
@@ -105,8 +105,8 @@ site.route = function () {
 	app.post('/api/docs/edit', middleware.ensureAuthenticated, middleware.ensureIsStaff, api.docs.update)
 	app.delete('/api/docs/destroy', middleware.ensureAuthenticated, middleware.ensureIsStaff, api.docs.destroy)
 
-	app.get('/layout', middleware.ensureAuthenticated, views.modal)
-	app.get('/layout/:name', middleware.ensureAuthenticated, views.builder)
+	app.get('/layout', middleware.ensureAuthenticated, middleware.ensureIsStaff, views.modal)
+	app.get('/layout/:name', middleware.ensureAuthenticated, middleware.ensureIsStaff, views.builder)
 
 	app.get('/project', middleware.ensureAuthenticated, views.modal)
 	app.get('/project/new', middleware.ensureAuthenticated, views.modal)
@@ -115,16 +115,15 @@ site.route = function () {
 
 	app.get('/api/layouts', middleware.ensureAuthenticated, api.layouts.index)
 	app.get('/api/layouts/:slug', middleware.ensureAuthenticated, api.layouts.show)
-	app.post('/api/layouts/new', middleware.ensureAuthenticated, api.layouts.create)
-	app.post('/api/layouts/edit', middleware.ensureAuthenticated, api.layouts.update)
-	app.delete('/api/layouts/destroy', middleware.ensureAuthenticated, api.layouts.destroy)
+	app.post('/api/layouts/new', middleware.ensureAuthenticated, middleware.ensureIsStaff, api.layouts.create)
+	app.post('/api/layouts/edit', middleware.ensureAuthenticated, middleware.ensureIsStaff, api.layouts.update)
+	app.delete('/api/layouts/destroy', middleware.ensureAuthenticated, middleware.ensureIsStaff, api.layouts.destroy)
 
 	app.get('/api/projects', middleware.ensureAuthenticated, api.projects.index)
 	app.get('/api/projects/:slug', middleware.ensureAuthenticated, api.projects.show)
 	app.post('/api/projects/new', middleware.ensureAuthenticated, api.projects.create)
 	app.post('/api/projects/edit', middleware.ensureAuthenticated, api.projects.update)
 	app.delete('/api/projects/destroy', middleware.ensureAuthenticated, api.projects.destroy)
-
 }