1 files changed, 6 insertions, 1 deletions
diff --git a/app/app.go b/app/app.go
index 6b89c5b..11b06f4 100644
--- a/app/app.go
+++ b/app/app.go
@@ -97,10 +97,15 @@ func NewApp(cfg *Config) (*App, error) {
 
 	// Setup Router
 	authPassword := os.Getenv("auth_password")
+	isSandstorm := os.Getenv("SANDSTORM")
 
 	r := mux.NewRouter().StrictSlash(true)
 	r.HandleFunc("/", a.indexHandler).Methods("GET", "OPTIONS")
-	r.HandleFunc("/upload", middleware.OptionallyRequireAdminAuth(a.uploadHandler, authPassword)).Methods("GET", "OPTIONS", "POST")
+	if isSandstorm == "1" {
+		r.HandleFunc("/upload", middleware.RequireSandstormPermission(a.uploadHandler, "upload")).Methods("GET", "OPTIONS", "POST")
+	} else {
+		r.HandleFunc("/upload", middleware.OptionallyRequireAdminAuth(a.uploadHandler, authPassword)).Methods("GET", "OPTIONS", "POST")
+	}
 	r.HandleFunc("/import", a.importHandler).Methods("GET", "OPTIONS", "POST")
 	r.HandleFunc("/v/{id}.mp4", a.videoHandler).Methods("GET")
 	r.HandleFunc("/v/{prefix}/{id}.mp4", a.videoHandler).Methods("GET")