From 7a7767597ddae955c6411efe62453ad5aa021f2b Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sat, 29 Nov 2025 10:30:38 +0100
Subject: [PATCH] Allow any daemon with read access access for ranking

Otherwise DOMlogo can't get the data with local judgehosts against an online (non)ranked contest.
The alternative of default allowing the judgedaemon is worse as it normally doesn't need those credentials so
for this case you need to extend that user with API_READER, giving it JURY would give it much more access than we want.
---
 webapp/src/Controller/API/TeamController.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webapp/src/Controller/API/TeamController.php b/webapp/src/Controller/API/TeamController.php
index 27788adb34..43a16a5bf4 100644
--- a/webapp/src/Controller/API/TeamController.php
+++ b/webapp/src/Controller/API/TeamController.php
@@ -84,7 +84,7 @@ public function __construct(
     )]
     public function listAction(Request $request): Response
     {
-        if (!$this->config->get('enable_ranking') && !$this->dj->checkrole('jury')) {
+        if (!$this->config->get('enable_ranking') && !$this->dj->checkrole('api_reader')) {
             throw new BadRequestHttpException("teams list not available.");
         }
         return parent::performListAction($request);