Added authentication for statistics. Fix #140

JaanJanno · Dec 4, 2016 · ef5adce · ef5adce
1 parent 9f1675e
commit ef5adce
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/java/ee/avok/consultation/controller/StatisticsController.java b/src/main/java/ee/avok/consultation/controller/StatisticsController.java
@@ -52,8 +52,8 @@ public String statisticsPage(Model model, @CookieValue(value = "session", defaul
 
 	@RequestMapping("/statistics/{period}")
 	public String getStatistics(Model model,@PathVariable("period") String period,
-			@CookieValue(value = "session", defaultValue = "none") String session){
-
+			@CookieValue(value = "session", defaultValue = "none") String session) throws UnauthorizedException{
+		authServ.authenticateRequestForRole(session, Role.ADMINISTRATOR);
 		StatisticsDTO stats = statServ.getStatistics(period);
 		model.addAttribute("stats", stats);