alerting: only editors can pause rules

closes #9640
8 years ago · 9b6535cca1
parent beb203209b
commit 9b6535cca1
1 changed files with 1 additions and 1 deletions
--- a/pkg/api/api.go
+++ b/pkg/api/api.go
@ -267,7 +267,7 @@ func (hs *HttpServer) registerRoutes() {

 		apiRoute.Group("/alerts", func(alertsRoute RouteRegister) {
 			alertsRoute.Post("/test", bind(dtos.AlertTestCommand{}), wrap(AlertTest))
-			alertsRoute.Post("/:alertId/pause", bind(dtos.PauseAlertCommand{}), wrap(PauseAlert), reqEditorRole)
+			alertsRoute.Post("/:alertId/pause", reqEditorRole, bind(dtos.PauseAlertCommand{}), wrap(PauseAlert))
 			alertsRoute.Get("/:alertId", ValidateOrgAlert, wrap(GetAlert))
 			alertsRoute.Get("/", wrap(GetAlerts))
 			alertsRoute.Get("/states-for-dashboard", wrap(GetAlertStatesForDashboard))