From ca07660e6e241a6068936389e95c7f3d9db11e91 Mon Sep 17 00:00:00 2001
From: Eldad Fux <eldad.fux@gmail.com>
Date: Sun, 7 Jun 2020 08:43:25 +0300
Subject: [PATCH] Changed access roles for health API

---
 CHANGES.md           | 4 ++++
 app/config/roles.php | 2 --
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGES.md b/CHANGES.md
index 37e7a4b0dc..3606b9792e 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -9,6 +9,10 @@
 
 - Fixed output of /v1/health/queue/certificates returning wrong data
 
+## Security
+
+- Access to health API now requires authentication with an API Key with access to `health.read` scope allowed
+
 # Version 0.6.2 (PRE-RELEASE)
 
 ## Features
diff --git a/app/config/roles.php b/app/config/roles.php
index f462305d97..001ebb4909 100644
--- a/app/config/roles.php
+++ b/app/config/roles.php
@@ -24,7 +24,6 @@ $logged = [
     'projects.write',
     'locale.read',
     'avatars.read',
-    'health.read',
 ];
 
 $admins = [
@@ -62,7 +61,6 @@ return [
             'files.read',
             'locale.read',
             'avatars.read',
-            'health.read',
         ],
     ],
     ROLE_MEMBER => [