From 49ea4522dfd06f8723251e82562eec43e4f257cf Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Feb 02 2018 17:00:54 +0000
Subject: Require scope for manual trigger.


---

diff --git a/freshmaker/views.py b/freshmaker/views.py
index e3c83f4..74c2b34 100644
--- a/freshmaker/views.py
+++ b/freshmaker/views.py
@@ -32,7 +32,7 @@ from freshmaker.api_utils import pagination_metadata
 from freshmaker.api_utils import filter_artifact_builds
 from freshmaker.api_utils import filter_events
 from freshmaker.api_utils import json_error
-from freshmaker.auth import login_required, requires_role
+from freshmaker.auth import login_required, requires_role, require_scopes
 from freshmaker import messaging
 
 api_v1 = {
@@ -223,6 +223,7 @@ class BuildAPI(MethodView):
                 return json_error(404, "Not Found", "No such build found.")
 
     @login_required
+    @require_scopes('manual-trigger')
     @requires_role('admins')
     def post(self):
         """Trigger image rebuild"""