feat(invitation): update authorization policy in InvitationController

Technical user/clients were now able to use endpoint. Refs: #932
eclipse-tractusx · Aug 15, 2024 · fcea7eb · fcea7eb
1 parent 16884de
commit fcea7eb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/administration/Administration.Service/Controllers/InvitationController.cs b/src/administration/Administration.Service/Controllers/InvitationController.cs
@@ -62,7 +62,7 @@ public InvitationController(IInvitationBusinessLogic logic)
     /// <response code="409">user is not associated with  company.</response>
     [HttpPost]
     [Authorize(Roles = "invite_new_partner")]
-    [Authorize(Policy = PolicyTypes.CompanyUser)]
+    [Authorize(Policy = PolicyTypes.ValidCompany)]
     [ProducesResponseType(StatusCodes.Status200OK)]
     [ProducesResponseType(typeof(ErrorResponse), StatusCodes.Status400BadRequest)]
     [ProducesResponseType(typeof(ErrorResponse), StatusCodes.Status500InternalServerError)]