From ae1c2ec50d804b50b47f5b905049a8df143d48ea Mon Sep 17 00:00:00 2001 From: Kevin Chung Date: Wed, 4 Mar 2020 01:08:13 -0500 Subject: [PATCH] Set UserStatistics route to be admins_only (#1276) * Set UserStatistics route to be admins_only --- CTFd/api/v1/statistics/users.py | 1 + 1 file changed, 1 insertion(+) diff --git a/CTFd/api/v1/statistics/users.py b/CTFd/api/v1/statistics/users.py index 86902c9..0632bf6 100644 --- a/CTFd/api/v1/statistics/users.py +++ b/CTFd/api/v1/statistics/users.py @@ -8,6 +8,7 @@ from CTFd.utils.decorators import admins_only @statistics_namespace.route("/users") class UserStatistics(Resource): + @admins_only def get(self): registered = Users.query.count() confirmed = Users.query.filter_by(verified=True).count()