From c57c3c15734c153d541247cc5fca198cb0e4f7b6 Mon Sep 17 00:00:00 2001
From: provokateurin <kate@provokateurin.de>
Date: Thu, 25 Jul 2024 13:24:59 +0200
Subject: refactor(core): Replace security annotations with respective
 attributes

Signed-off-by: provokateurin <kate@provokateurin.de>
---
 core/Controller/WhatsNewController.php | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

(limited to 'core/Controller/WhatsNewController.php')

diff --git a/core/Controller/WhatsNewController.php b/core/Controller/WhatsNewController.php
index 1218e2d1f68..06b27b0d302 100644
--- a/core/Controller/WhatsNewController.php
+++ b/core/Controller/WhatsNewController.php
@@ -11,6 +11,7 @@ use OC\Updater\ChangesCheck;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\AppFramework\Http;
 use OCP\AppFramework\Http\Attribute\ApiRoute;
+use OCP\AppFramework\Http\Attribute\NoAdminRequired;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\Defaults;
 use OCP\IConfig;
@@ -36,8 +37,6 @@ class WhatsNewController extends OCSController {
 	}
 
 	/**
-	 * @NoAdminRequired
-	 *
 	 * Get the changes
 	 *
 	 * @return DataResponse<Http::STATUS_OK, array{changelogURL: string, product: string, version: string, whatsNew?: array{regular: string[], admin: string[]}}, array{}>|DataResponse<Http::STATUS_NO_CONTENT, array<empty>, array{}>
@@ -45,6 +44,7 @@ class WhatsNewController extends OCSController {
 	 * 200: Changes returned
 	 * 204: No changes
 	 */
+	#[NoAdminRequired]
 	#[ApiRoute(verb: 'GET', url: '/whatsnew', root: '/core')]
 	public function get():DataResponse {
 		$user = $this->userSession->getUser();
@@ -81,8 +81,6 @@ class WhatsNewController extends OCSController {
 	}
 
 	/**
-	 * @NoAdminRequired
-	 *
 	 * Dismiss the changes
 	 *
 	 * @param string $version Version to dismiss the changes for
@@ -93,6 +91,7 @@ class WhatsNewController extends OCSController {
 	 *
 	 * 200: Changes dismissed
 	 */
+	#[NoAdminRequired]
 	#[ApiRoute(verb: 'POST', url: '/whatsnew', root: '/core')]
 	public function dismiss(string $version):DataResponse {
 		$user = $this->userSession->getUser();
-- 
cgit v1.2.3