Add API access to personal journal, and forbid anonymous access on them

rhodecode/controllers/journal.py

@@ -83,6 +83,7 b' class JournalController(BaseController):'
         return render('journal/journal.html')
 
     @LoginRequired(api_access=True)
+    @NotAnonymous()
     def journal_atom(self):
         """
         Produce an atom-1.0 feed via feedgenerator module
@@ -94,6 +95,7 b' class JournalController(BaseController):'
         return self._atom_feed(following, public=False)
 
     @LoginRequired(api_access=True)
+    @NotAnonymous()
     def journal_rss(self):
         """
         Produce an rss feed via feedgenerator module

rhodecode/templates/journal/journal.html

@@ -20,10 +20,10 b''
                  <span><a id="refresh" href="${h.url('journal')}"><img class="icon" title="${_('Refresh')}" alt="${_('Refresh')}" src="${h.url('/images/icons/arrow_refresh.png')}"/></a></span>
                </li>
                <li>
-                 <span><a href="${h.url('journal_rss')}"><img class="icon" title="${_('RSS feed')}" alt="${_('RSS feed')}" src="${h.url('/images/icons/atom.png')}"/></a></span>
+                 <span><a href="${h.url('journal_rss', api_key=c.rhodecode_user.api_key)}"><img class="icon" title="${_('RSS feed')}" alt="${_('RSS feed')}" src="${h.url('/images/icons/atom.png')}"/></a></span>
                </li>
                <li>
-                 <span><a href="${h.url('journal_atom')}"><img class="icon" title="${_('ATOM feed')}" alt="${_('ATOM feed')}" src="${h.url('/images/icons/rss_16.png')}"/></a></span>
+                 <span><a href="${h.url('journal_atom', api_key=c.rhodecode_user.api_key)}"><img class="icon" title="${_('ATOM feed')}" alt="${_('ATOM feed')}" src="${h.url('/images/icons/rss_16.png')}"/></a></span>
                </li>
              </ul>
 	    </div>