From 9f8c172d251729a9fcfd9852c645ac20e599399a Mon Sep 17 00:00:00 2001
From: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com>
Date: Thu, 23 Apr 2026 12:54:46 -0500
Subject: [PATCH] require admin role for storage usage endpoint

---
 frigate/api/record.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frigate/api/record.py b/frigate/api/record.py
index 4ab4b0af16..f6366813b6 100644
--- a/frigate/api/record.py
+++ b/frigate/api/record.py
@@ -35,7 +35,7 @@ logger = logging.getLogger(__name__)
 router = APIRouter(tags=[Tags.recordings])
 
 
-@router.get("/recordings/storage", dependencies=[Depends(allow_any_authenticated())])
+@router.get("/recordings/storage", dependencies=[Depends(require_role(["admin"]))])
 def get_recordings_storage_usage(request: Request):
     recording_stats = request.app.stats_emitter.get_latest_stats()["service"][
         "storage"