Actually implement the OT_PERMISSION_MAY_FULLSCRAPE mechanics and add a config file entry

1 files changed, 5 insertions, 0 deletions

diff --git a/src/ot_http.c b/src/ot_http.c
index 533a876..d2dad67 100644
--- a/src/ot_http.c
+++ b/src/ot_http.c
@@ -402,6 +402,11 @@ static ssize_t http_handle_fullscrape(const int64_t sock, struct ot_workstruct *
   struct http_data *cookie = fdstate_cookie(sock);
   int               format = 0;
 
+#ifdef WANT_RESTRICT_FULLSCRAPE
+  if (!accesslist_is_blessed(cookie->ip, OT_PERMISSION_MAY_FULLSCRAPE))
+    HTTPERROR_403_IP;
+#endif
+
 #ifdef WANT_MODEST_FULLSCRAPES
   {
     ot_scrape_log this_peer, *new_peer;