1 files changed, 5 insertions, 0 deletions
diff --git a/Timeline/Controllers/UserDetailController.cs b/Timeline/Controllers/UserDetailController.cs
index ef13b462..9de9899e 100644
--- a/Timeline/Controllers/UserDetailController.cs
+++ b/Timeline/Controllers/UserDetailController.cs
@@ -4,6 +4,7 @@ using Timeline.Filters;
 using Timeline.Models.Validation;
 using Timeline.Services;
 using System.ComponentModel.DataAnnotations;
+using Microsoft.AspNetCore.Authorization;
 
 namespace Timeline.Controllers
 {
@@ -25,6 +26,8 @@ namespace Timeline.Controllers
         }
 
         [HttpPut("users/{username}/nickname")]
+        [Authorize]
+        [SelfOrAdmin]
         [CatchUserNotExistException]
         public async Task<ActionResult> PutNickname([FromRoute][Username] string username,
             [FromBody][StringLength(10, MinimumLength = 1)] string body)
@@ -34,6 +37,8 @@ namespace Timeline.Controllers
         }
 
         [HttpDelete("users/{username}/nickname")]
+        [Authorize]
+        [SelfOrAdmin]
         [CatchUserNotExistException]
         public async Task<ActionResult> DeleteNickname([FromRoute][Username] string username)
         {