feat(invitation): update authorization policy in InvitationController

Technical user/clients were now able to use endpoint. Refs: eclipse-tractusx#932
Cofinity-X · Aug 14, 2024 · 4ab2608 · 4ab2608
1 parent 7286027
commit 4ab2608
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/administration/Administration.Service/Controllers/InvitationController.cs b/src/administration/Administration.Service/Controllers/InvitationController.cs
@@ -62,7 +62,7 @@ public InvitationController(IInvitationBusinessLogic logic)
     /// <response code="409">user is not associated with  company.</response>
     [HttpPost]
     [Authorize(Roles = "invite_new_partner")]
-    [Authorize(Policy = PolicyTypes.CompanyUser)]
+    [Authorize(Policy = PolicyTypes.ValidCompany)]
     [ProducesResponseType(StatusCodes.Status200OK)]
     [ProducesResponseType(typeof(ErrorResponse), StatusCodes.Status400BadRequest)]
     [ProducesResponseType(typeof(ErrorResponse), StatusCodes.Status500InternalServerError)]