@@ -448,21 +448,23 @@ func New(ctx context.Context, options *Options) (_ *API, err error) {
448448)
449449r .Get ("/" ,api .provisionerDaemonServe )
450450})
451- r .Route ("/templates/{template}" ,func (r chi.Router ) {
451+ r .Route ("/templates/{template}/acl " ,func (r chi.Router ) {
452452r .Use (
453+ api .templateRBACEnabledMW ,
454+ apiKeyMiddleware ,
453455httpmw .ExtractTemplateParam (api .Database ),
454456)
455- r .Post ("/prebuilds/invalidate" ,api .postInvalidateTemplatePrebuilds )
456- r .Route ("/acl" ,func (r chi.Router ) {
457- r .Use (
458- api .templateRBACEnabledMW ,
459- apiKeyMiddleware ,
460- )
461- r .Get ("/available" ,api .templateAvailablePermissions )
462- r .Get ("/" ,api .templateACL )
463- r .Patch ("/" ,api .patchTemplateACL )
464- })
457+ r .Get ("/available" ,api .templateAvailablePermissions )
458+ r .Get ("/" ,api .templateACL )
459+ r .Patch ("/" ,api .patchTemplateACL )
465460})
461+ r .Route ("/templates/{template}/prebuilds" ,func (r chi.Router ) {
462+ r .Use (
463+ httpmw .ExtractTemplateParam (api .Database ),
464+ )
465+ r .Post ("/invalidate" ,api .postInvalidateTemplatePrebuilds )
466+ })
467+
466468r .Route ("/groups" ,func (r chi.Router ) {
467469r .Use (
468470api .templateRBACEnabledMW ,