From 9f47f8b2655ad108ef9d381497311af816326331 Mon Sep 17 00:00:00 2001
From: pavelbannov <pavel.bannov@onlyoffice.com>
Date: Fri, 8 Dec 2023 16:30:36 +0300
Subject: [PATCH] Csp: anonymous get

---
 web/ASC.Web.Api/Api/SecurityController.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/ASC.Web.Api/Api/SecurityController.cs b/web/ASC.Web.Api/Api/SecurityController.cs
index 2984fe564d6..41e17378b09 100644
--- a/web/ASC.Web.Api/Api/SecurityController.cs
+++ b/web/ASC.Web.Api/Api/SecurityController.cs
@@ -405,10 +405,11 @@ public async Task<CspDto> Csp(CspRequestsDto request)
         return new CspDto { Domains = request.Domains, Header = header };
     }
 
+    [AllowAnonymous]
     [HttpGet("csp")]
     public async Task<CspDto> Csp()
     {
-        await _permissionContext.DemandPermissionsAsync(SecurityConstants.EditPortalSettings);
+        //await _permissionContext.DemandPermissionsAsync(SecurityConstants.EditPortalSettings);
         var settings = await _cspSettingsHelper.LoadAsync();
         return new CspDto
         {