5acc252921
Both endpoints were authenticated but had no role check, allowing any logged-in USER to view company-wide analytics and export all tickets. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>