From da37c9a0a5adbabd83ed3f3631479f4a440633f6 Mon Sep 17 00:00:00 2001
From: David Sevilla Martin <me@datitisev.me>
Date: Tue, 29 Oct 2019 18:05:49 -0400
Subject: [PATCH] Assert registered in /api/flags to fix issue with guests

---
 extensions/flags/src/Api/Controller/ListFlagsController.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/extensions/flags/src/Api/Controller/ListFlagsController.php b/extensions/flags/src/Api/Controller/ListFlagsController.php
index 77296808e..69c4c9f3f 100644
--- a/extensions/flags/src/Api/Controller/ListFlagsController.php
+++ b/extensions/flags/src/Api/Controller/ListFlagsController.php
@@ -14,11 +14,14 @@ namespace Flarum\Flags\Api\Controller;
 use Flarum\Api\Controller\AbstractListController;
 use Flarum\Flags\Api\Serializer\FlagSerializer;
 use Flarum\Flags\Flag;
+use Flarum\User\AssertPermissionTrait;
 use Psr\Http\Message\ServerRequestInterface;
 use Tobscure\JsonApi\Document;
 
 class ListFlagsController extends AbstractListController
 {
+    use AssertPermissionTrait;
+
     /**
      * {@inheritdoc}
      */
@@ -41,6 +44,8 @@ class ListFlagsController extends AbstractListController
     {
         $actor = $request->getAttribute('actor');
 
+        $this->assertRegistered($actor);
+
         $actor->read_flags_at = time();
         $actor->save();