X-Git-Url: https://git.pterodactylus.net/?p=Sone.git;a=blobdiff_plain;f=src%2Fmain%2Fjava%2Fnet%2Fpterodactylus%2Fsone%2Fweb%2Fpage%2FFreenetTemplatePage.java;h=5831a1b339a8c0bd7fced073b91b7a9e06ebcd92;hp=6e7812f91ebc9f4f5cf8ee2bd0b70679049b3389;hb=ed57f849f204eee0a3074c1acb7c290ef20ada3a;hpb=8dc44b0d52a3e8b52fb217fb97872ba699fffbaa

diff --git a/src/main/java/net/pterodactylus/sone/web/page/FreenetTemplatePage.java b/src/main/java/net/pterodactylus/sone/web/page/FreenetTemplatePage.java
index 6e7812f..5831a1b 100644
--- a/src/main/java/net/pterodactylus/sone/web/page/FreenetTemplatePage.java
+++ b/src/main/java/net/pterodactylus/sone/web/page/FreenetTemplatePage.java
@@ -109,6 +109,9 @@ public class FreenetTemplatePage implements Page, LinkEnabledCallback {
 			return new RedirectResponse(redirectTarget);
 		}
 
+		if (isFullAccessOnly() && !request.getToadletContext().isAllowedFullAccess()) {
+			return new Response(401, "Not authorized", "text/html", "Not authorized");
+		}
 		ToadletContext toadletContext = request.getToadletContext();
 		if (request.getMethod() == Method.POST) {
 			/* require form password. */
@@ -227,6 +230,17 @@ public class FreenetTemplatePage implements Page, LinkEnabledCallback {
 		return Collections.emptyList();
 	}
 
+	/**
+	 * Returns whether this page should only be allowed for requests from hosts
+	 * with full access.
+	 *
+	 * @return {@code true} if this page should only be allowed for hosts with
+	 *         full access, {@code false} to allow this page for any host
+	 */
+	protected boolean isFullAccessOnly() {
+		return false;
+	}
+
 	//
 	// INTERFACE LinkEnabledCallback
 	//
@@ -236,7 +250,7 @@ public class FreenetTemplatePage implements Page, LinkEnabledCallback {
 	 */
 	@Override
 	public boolean isEnabled(ToadletContext toadletContext) {
-		return true;
+		return !isFullAccessOnly();
 	}
 
 	/**