Don't use the implicit perms='user' arg for make_*hook.
[platal.git] / modules / api.php
index edbc2cd..11630cc 100644 (file)
@@ -27,7 +27,7 @@ class ApiModule extends PlModule
             // TODO(vzanotti): Extend the plat/al engine to support placeholders
             // in handler urls, for instance "api/1/user/%forlife/isRegistered".
             'api/1/user'   => $this->make_api_hook('user',   AUTH_COOKIE, 'api_user_readonly'),
-            'api/1/search' => $this->make_api_hook('search', AUTH_COOKIE),
+            'api/1/search' => $this->make_api_hook('search', AUTH_COOKIE, 'user'),
         );
     }