csrf token now default, groups improved

2020-06-23 15:31:09 +02:00
parent 42e1ac95c8
commit a4504d8336
13 changed files with 140 additions and 83 deletions
--- a/core/Api/Stats.class.php
+++ b/core/Api/Stats.class.php
@@ -9,9 +9,9 @@ class Stats extends Request {

  public function __construct($user, $externalCall = false) {
    parent::__construct($user, $externalCall, array());
-    $this->csrfTokenRequired = true;
+
    $this->loginRequired = true;
-    $this->requiredGroup = USER_GROUP_ADMIN;
+    $this->requiredGroup = array(USER_GROUP_SUPPORT, USER_GROUP_ADMIN);
  }

  private function getUserCount() {