s.gruessing/IT-Nexus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix: HR/Personal darf Assets und FidoKeys lesen (Offboarding-Flow)

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Simon Grüssing
2026-06-11 11:36:01 +02:00
parent 26fc81ef11
commit b3be7ee06b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
backend/src/middleware/roleCheck.js
View File

@@ -64,14 +64,14 @@ function canModifyFidoKeys(req, res, next) {
* Check if user can view FIDO keys (all authenticated users)
*/
function canViewFidoKeys(req, res, next) {
return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.BEARBEITER, ROLES.BENUTZER])(req, res, next);
return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.BEARBEITER, ROLES.BENUTZER, ROLES.HR_PERSONAL, ROLES.SUPPORT])(req, res, next);
}
/**
* Check if user can view assets (Super Admin, Admin, Bearbeiter)
*/
function canViewAssets(req, res, next) {
return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.TECHNIKER])(req, res, next);
return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.TECHNIKER, ROLES.HR_PERSONAL, ROLES.SUPPORT, ROLES.BEARBEITER])(req, res, next);
}
/**