<?php 
$I = new ApiTester($scenario);
$I->wantTo('perform actions and see result');

$I->login();

$I->comment('as admin I can read all users stat');
$I->sendGET('users/statistics', [
    'roles' => '1,2,3',
    'period' => 'total',
]);
$I->seeResponseCodeIs(\Codeception\Util\HttpCode::OK);
$I->seeUsersStatisticsArray();

$I->comment('requesting for arbitrary dates interval');
$I->sendGET('users/statistics', [
    'roles' => '1,2,3',
    'period' => '01/01/2000-31/12/2099',
]);
$I->seeResponseCodeIs(\Codeception\Util\HttpCode::OK);
$I->seeUsersStatisticsArray();

$I->comment('as staff I cant read nothing');
$staffCredentials = ['username' => ApiTester::STAFF_USER, 'password' => ApiTester::PASSWORD_DEFAULT];

$I->login($staffCredentials);
$I->sendGET('users/statistics', [
    'roles' => '2',
    'period' => 'total',
]);
$I->seeResponseCodeIs(\Codeception\Util\HttpCode::FORBIDDEN);