Fix permission checking in vm.start().

2014-02-06 17:13:51 +01:00 · 2014-02-06 17:13:51 +01:00 · eb95c75c29
commit eb95c75c29
parent a522e2bcbd
1 changed files with 2 additions and 0 deletions
--- a/src/api/vm.coffee
+++ b/src/api/vm.coffee
@ -397,6 +397,8 @@ exports.start = ->
    id: { type: 'string' }
  }

+  @checkPermission 'admin'
+
  try
    VM = @getObject id
  catch