From 4c539b6db4315cde925ac1be940e4a6a10a4cfa8 Mon Sep 17 00:00:00 2001
From: Ozzieisaacs <ozzie.fernandez.isaacs@googlemail.com>
Date: Wed, 3 Jun 2020 19:10:07 +0200
Subject: [PATCH] Fix #1448 (Public shelfs are accessible even if not logged
 in)

---
 cps/shelf.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cps/shelf.py b/cps/shelf.py
index b13fe556..30768930 100644
--- a/cps/shelf.py
+++ b/cps/shelf.py
@@ -308,6 +308,7 @@ def delete_shelf(shelf_id):
 
 @shelf.route("/shelf/<int:shelf_id>", defaults={'shelf_type': 1})
 @shelf.route("/shelf/<int:shelf_id>/<int:shelf_type>")
+@login_required
 def show_shelf(shelf_type, shelf_id):
     shelf = ub.session.query(ub.Shelf).filter(ub.Shelf.id == shelf_id).first()