From 20fcd4ac16aa99e1a157c407bd5773ef43e02ad8 Mon Sep 17 00:00:00 2001
From: Jeppe B <2jepp9350@gmail.com>
Date: Mon, 1 Jun 2026 22:50:33 +0200
Subject: [PATCH] Protect XLVask sync-usage route with permission check

---
 services/nginx/app/routes/moduleXLVaskRoute.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/nginx/app/routes/moduleXLVaskRoute.php b/services/nginx/app/routes/moduleXLVaskRoute.php
index d8b52a6d..2fb81642 100644
--- a/services/nginx/app/routes/moduleXLVaskRoute.php
+++ b/services/nginx/app/routes/moduleXLVaskRoute.php
@@ -176,7 +176,7 @@ class moduleXLVaskRoute
 
         $this->get('/modules/xlvask/tasks/sync-usage', function () {
             global $response;
-            //self::requirePermission('modules_xlvask_sync_usage');
+            self::requirePermission('modules_xlvask_sync_usage');
             // Remove the memory limit
             // ini_set('memory_limit', '-1');
             // Remove the execution time limit