From 637ae6d1dac0c60e37e537d082c839bfb9c5918b Mon Sep 17 00:00:00 2001 From: Damien <damien.burel@maarch.org> Date: Fri, 18 Dec 2020 09:48:15 +0100 Subject: [PATCH] FEAT #10994 TIME 0:05 History adjustments --- src/app/history/controllers/HistoryController.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/app/history/controllers/HistoryController.php b/src/app/history/controllers/HistoryController.php index 4414027db8..50a5207be1 100755 --- a/src/app/history/controllers/HistoryController.php +++ b/src/app/history/controllers/HistoryController.php @@ -60,9 +60,9 @@ class HistoryController public function get(Request $request, Response $response) { -// if (!PrivilegeController::hasPrivilege(['userId' => $GLOBALS['id'], 'privilege' => 'manage_history'])) { -// return $response->withStatus(403)->withJson(['errors' => 'Service forbidden']); -// } + if (!PrivilegeController::hasPrivilege(['userId' => $GLOBALS['id'], 'privilege' => 'manage_history'])) { + return $response->withStatus(403)->withJson(['errors' => 'Service forbidden']); + } $queryParams = $request->getQueryParams(); $body = $request->getParsedBody(); -- GitLab