From 3f62cf512f044a0e071e4f2155c02755a09caa3a Mon Sep 17 00:00:00 2001
From: James Cole <thegrumpydictator@gmail.com>
Date: Sun, 17 Dec 2017 19:22:34 +0100
Subject: [PATCH] Limit some upload functions for demo users.

---
 app/Http/Controllers/Import/ConfigurationController.php | 2 ++
 app/Http/Controllers/Import/IndexController.php         | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/app/Http/Controllers/Import/ConfigurationController.php b/app/Http/Controllers/Import/ConfigurationController.php
index 41d8cc5a69..6a299b333f 100644
--- a/app/Http/Controllers/Import/ConfigurationController.php
+++ b/app/Http/Controllers/Import/ConfigurationController.php
@@ -26,6 +26,7 @@ namespace FireflyIII\Http\Controllers\Import;
 
 use FireflyIII\Exceptions\FireflyException;
 use FireflyIII\Http\Controllers\Controller;
+use FireflyIII\Http\Middleware\IsLimitedUser;
 use FireflyIII\Import\Configuration\ConfiguratorInterface;
 use FireflyIII\Models\ImportJob;
 use FireflyIII\Repositories\ImportJob\ImportJobRepositoryInterface;
@@ -56,6 +57,7 @@ class ConfigurationController extends Controller
                 return $next($request);
             }
         );
+        $this->middleware(IsLimitedUser::class)->except(['index']);
     }
 
     /**
diff --git a/app/Http/Controllers/Import/IndexController.php b/app/Http/Controllers/Import/IndexController.php
index a04bda626b..d139196905 100644
--- a/app/Http/Controllers/Import/IndexController.php
+++ b/app/Http/Controllers/Import/IndexController.php
@@ -26,6 +26,7 @@ namespace FireflyIII\Http\Controllers\Import;
 
 use FireflyIII\Exceptions\FireflyException;
 use FireflyIII\Http\Controllers\Controller;
+use FireflyIII\Http\Middleware\IsLimitedUser;
 use FireflyIII\Import\Routine\ImportRoutine;
 use FireflyIII\Import\Routine\RoutineInterface;
 use FireflyIII\Models\ImportJob;
@@ -59,6 +60,8 @@ class IndexController extends Controller
                 return $next($request);
             }
         );
+
+        $this->middleware(IsLimitedUser::class)->except(['create','index']);
     }
 
     /**