Merge pull request #2033 from bcgov/fix/sow-upload-permissions

fix: allow analyst role to use sow-upload api route
bcgov · Aug 2, 2023 · 982e0cb · 982e0cb
2 parents 1a022d4 + d67fc17
commit 982e0cb
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/backend/lib/sow-upload.ts b/app/backend/lib/sow-upload.ts
@@ -25,7 +25,8 @@ const sowUpload = Router();
 
 const processSow: ExpressMiddleware = async (req, res) => {
   const authRole = getAuthRole(req);
-  const isRoleAuthorized = authRole?.pgRole === 'ccbc_admin';
+  const isRoleAuthorized =
+    authRole?.pgRole === 'ccbc_admin' || authRole?.pgRole === 'ccbc_analyst';
 
   if (!isRoleAuthorized) {
     return res.status(404).end();