Fixed incorrect authorization for ShowImage API

airtime_mvc/application/configs/ACL.php

@@ -54,7 +54,8 @@ $ccAcl->allow('G', 'index')
       ->allow('G', 'upgrade')
       ->allow('G', 'provisioning')
       ->allow('G', 'downgrade')
-      ->allow('G', 'rest:show-image')
+      ->allow('G', 'rest:show-image', 'get')
+      ->allow('H', 'rest:show-image')
       ->allow('G', 'rest:media', 'get')
       ->allow('H', 'rest:media')
       ->allow('H', 'preference', 'is-import-in-progress')

airtime_mvc/application/modules/rest/controllers/ShowImageController.php

@@ -40,12 +40,6 @@ class Rest_ShowImageController extends Zend_Rest_Controller {
      * RESTful POST endpoint; used when uploading show images
      */
     public function postAction() {
-        if (!RestAuth::verifyAuth(true, true)) {
-            $this->getResponse()
-                ->setHttpResponseCode(401)
-                ->appendBody("Authentication failed");
-            return;
-        }
 
         $showId = $this->getShowId();
 
@@ -89,12 +83,6 @@ class Rest_ShowImageController extends Zend_Rest_Controller {
      * RESTful DELETE endpoint; used when deleting show images
      */
     public function deleteAction() {
-        if (!RestAuth::verifyAuth(true, true)) {
-            $this->getResponse()
-                ->setHttpResponseCode(401)
-                ->appendBody("Authentication failed");
-            return;
-        }
 
         $showId = $this->getShowId();