Mark user creation API endpoint as admin-only

mvdbeek · mvdbeek · commit 8555bfac3294 · 2025-10-24T16:02:04.000+02:00
Fixes #21148
diff --git a/lib/galaxy/webapps/galaxy/api/users.py b/lib/galaxy/webapps/galaxy/api/users.py
@@ -596,6 +596,7 @@ def delete_custom_builds(
         "/api/users",
         name="create_user",
         summary="Create a new Galaxy user. Only admins can create users for now.",
+        require_admin=True,
     )
     def create(
         self,

Original file line number	Diff line number	Diff line change
`@@ -596,6 +596,7 @@ def delete_custom_builds(`
`596`	`596`	`"/api/users",`
`597`	`597`	`name="create_user",`
`598`	`598`	`summary="Create a new Galaxy user. Only admins can create users for now.",`
	`599`	`+ require_admin=True,`
`599`	`600`	`)`
`600`	`601`	`def create(`
`601`	`602`	`self,`