From 820b7f709f35888ef2b05fbd064f99d28deb0534 Mon Sep 17 00:00:00 2001
From: Roman Hergenreder <mail@romanh.de>
Date: Tue, 23 Jun 2020 16:31:36 +0200
Subject: [PATCH] more permissions

---
 core/Api/NotificationsAPI.class.php | 3 +--
 core/Api/RoutesAPI.class.php        | 2 +-
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/core/Api/NotificationsAPI.class.php b/core/Api/NotificationsAPI.class.php
index 05525ce..3e8888f 100644
--- a/core/Api/NotificationsAPI.class.php
+++ b/core/Api/NotificationsAPI.class.php
@@ -25,7 +25,7 @@ namespace Api\Notifications {
         'message' =>  new StringType('message', 256),
       ));
       $this->isPublic = false;
-
+      $this->requiredGroup = array(USER_GROUP_ADMIN);
     }
 
     private function checkUser($userId) {
@@ -148,7 +148,6 @@ namespace Api\Notifications {
     public function __construct($user, $externalCall = false) {
       parent::__construct($user, $externalCall, array());
       $this->loginRequired = true;
-
     }
 
     private function fetchUserNotifications() {
diff --git a/core/Api/RoutesAPI.class.php b/core/Api/RoutesAPI.class.php
index d1c540c..9adda89 100644
--- a/core/Api/RoutesAPI.class.php
+++ b/core/Api/RoutesAPI.class.php
@@ -33,7 +33,7 @@ namespace Api\Routes {
   public function __construct($user, $externalCall = false) {
     parent::__construct($user, $externalCall, array());
     $this->loginRequired = true;
-
+    $this->requiredGroup = array(USER_GROUP_ADMIN);
   }
 
   public function execute($values = array()) {