diff --git a/RestControllers/GroupsController.php b/RestControllers/GroupsController.php index 607b768..3dc700a 100644 --- a/RestControllers/GroupsController.php +++ b/RestControllers/GroupsController.php @@ -715,6 +715,10 @@ class GroupsController { user_login_required(); + //Check user password + if(!check_post_password(userID, "password")) + Rest_fatal_error(401, "Password required!"); + //Get the group $groupID = getPostGroupIdWithAccess("groupID", GroupInfo::ADMIN_ACCESS);