From 332a9d800205082a2469e555fd66a63f18d9d5dc Mon Sep 17 00:00:00 2001
From: Aaron Liu <abslant.liu@gmail.com>
Date: Fri, 26 Jun 2026 10:27:35 +0800
Subject: [PATCH] fix(router): require admin write scope for test node routes

---
 routers/router.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/routers/router.go b/routers/router.go
index 90ce00c8..d1adcbce 100644
--- a/routers/router.go
+++ b/routers/router.go
@@ -1049,11 +1049,13 @@ func initMasterRouter(dep dependency.Dep) *gin.Engine {
 						controllers.AdminGetNode,
 					)
 					node.POST("test",
+						middleware.RequiredScopes(types.ScopeAdminWrite),
 						controllers.FromJSON[adminsvc.TestNodeService](adminsvc.TestNodeParamCtx{}),
 						controllers.AdminTestSlave,
 					)
 					node.POST("test/downloader",
 						controllers.FromJSON[adminsvc.TestNodeDownloaderService](adminsvc.TestNodeDownloaderParamCtx{}),
+						middleware.RequiredScopes(types.ScopeAdminWrite),
 						controllers.AdminTestDownloader,
 					)
 					node.PUT("",