# HG changeset patch
# User RhodeCode Admin <admin@rhodecode.com>
# Date 2021-10-12 12:47:16
# Node ID 77c100d1a6d9024286a9d475ff293cdafbc91778
# Parent  d501e9ec06c8c689b95ca4cb0fc1fd667461771a

healthcheck: Added authentication because we expose DB information

diff --git a/rhodecode/apps/ops/views.py b/rhodecode/apps/ops/views.py
--- a/rhodecode/apps/ops/views.py
+++ b/rhodecode/apps/ops/views.py
@@ -26,6 +26,8 @@ from pyramid.httpexceptions import HTTPF
 
 from rhodecode.apps._base import BaseAppView
 from rhodecode.lib import helpers as h
+from rhodecode.lib.auth import LoginRequired
+from rhodecode.model.db import UserApiKeys
 
 log = logging.getLogger(__name__)
 
@@ -73,6 +75,7 @@ class OpsView(BaseAppView):
         redirect_to = self.request.GET.get('to') or h.route_path('home')
         raise HTTPFound(redirect_to)
 
+    @LoginRequired(auth_token_access=[UserApiKeys.ROLE_HTTP])
     def ops_healthcheck(self):
         from rhodecode.lib.system_info import load_system_info