diff --git a/ApiCore-Backend/src/documents/documents.controller.ts b/ApiCore-Backend/src/documents/documents.controller.ts index 64acc39..8df2598 100644 --- a/ApiCore-Backend/src/documents/documents.controller.ts +++ b/ApiCore-Backend/src/documents/documents.controller.ts @@ -106,7 +106,6 @@ export class DocumentsController { res.send(buffer); } - @RequirePermission('documents:delete') @RequirePermission('documents:update') @Patch(':id') update( @@ -117,6 +116,7 @@ export class DocumentsController { return this.documentsService.update(id, dto, actor.id); } + @RequirePermission('documents:delete') @Delete(':id') @HttpCode(204) delete(@Param('id') id: string, @CurrentUser() actor: AuthenticatedUser) { diff --git a/ApiCore-Backend/src/honey-batches/honey-batches.controller.ts b/ApiCore-Backend/src/honey-batches/honey-batches.controller.ts index 8b015db..481e979 100644 --- a/ApiCore-Backend/src/honey-batches/honey-batches.controller.ts +++ b/ApiCore-Backend/src/honey-batches/honey-batches.controller.ts @@ -117,7 +117,6 @@ export class HoneyBatchesController { return this.honeyBatchesService.update(id, dto, actor.id); } - @RequirePermission('honey-batches:measure') @RequirePermission('honey-batches:measure') @Patch('measurements/:measurementId') updateMeasurement( @@ -132,6 +131,7 @@ export class HoneyBatchesController { ); } + @RequirePermission('honey-batches:measure') @Post(':id/measurements') addMeasurement( @Param('id') id: string, diff --git a/ApiCore-Backend/src/queens/queens.controller.ts b/ApiCore-Backend/src/queens/queens.controller.ts index 5d66406..35a5f29 100644 --- a/ApiCore-Backend/src/queens/queens.controller.ts +++ b/ApiCore-Backend/src/queens/queens.controller.ts @@ -81,7 +81,6 @@ export class QueensController { return this.queensService.getEvaluations(id); } - @RequirePermission('queens:evaluate') @RequirePermission('queens:evaluate') @Patch('evaluations/:evaluationId') updateEvaluation( @@ -92,6 +91,7 @@ export class QueensController { return this.queensService.updateEvaluation(evaluationId, dto, actor.id); } + @RequirePermission('queens:evaluate') @Post(':id/evaluations') addEvaluation( @Param('id') id: string,