Fix(SOAP): Add authorization check to getLearningProgressChanges.

Signed-off-by: Releasemanager <webmaster@ilias.de>

Author: sKarki999

components/ILIAS/soap/classes/class.ilSoapLearningProgressAdministration.php

@@ -499,6 +499,10 @@ public function getLearningProgressChanges(string $sid, string $timestamp, bool
             $types = implode(",", $type_filter);
         }
 
+        if (!$DIC->rbac()->review()->isAssigned($DIC->user()->getId(), SYSTEM_ROLE_ID)) {
+            return $this->raiseError('Permission denied.', 'Client');
+        }
+
         // output lp changes as xml
         try {
             $writer = new ilLPXmlWriter(true);