healthcheck: Added authentication because we expose DB information

rhodecode/apps/ops/views.py

@@ -26,6 +26,8 b' from pyramid.httpexceptions import HTTPF'
 
 from rhodecode.apps._base import BaseAppView
 from rhodecode.lib import helpers as h
+from rhodecode.lib.auth import LoginRequired
+from rhodecode.model.db import UserApiKeys
 
 log = logging.getLogger(__name__)
 
@@ -73,6 +75,7 b' class OpsView(BaseAppView):'
         redirect_to = self.request.GET.get('to') or h.route_path('home')
         raise HTTPFound(redirect_to)
 
+    @LoginRequired(auth_token_access=[UserApiKeys.ROLE_HTTP])
     def ops_healthcheck(self):
         from rhodecode.lib.system_info import load_system_info