From 177f77f664654978c501f5e4edf6c5b0db355cbe Mon Sep 17 00:00:00 2001
From: sohalt <sohalt@sohalt.net>
Date: Tue, 8 Oct 2019 14:29:35 +0200
Subject: [PATCH] Add permission check

---
 src/pretix/control/views/item.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/pretix/control/views/item.py b/src/pretix/control/views/item.py
index 9d9f80be02..1b5971a7c1 100644
--- a/src/pretix/control/views/item.py
+++ b/src/pretix/control/views/item.py
@@ -283,6 +283,7 @@ class QuestionList(PaginationMixin, ListView):
         return self.request.event.questions.prefetch_related('items')
 
 
+@event_permission_required("can_change_items")
 def reorder_questions(request, organizer, event):
     ids = json.loads(request.body.decode('utf-8'))['ids']
     questions = request.event.questions