From b3be7ee06be28d4527d9b478f8d179e905a2fd91 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Simon=20Gr=C3=BCssing?= Date: Thu, 11 Jun 2026 11:36:01 +0200 Subject: [PATCH] Fix: HR/Personal darf Assets und FidoKeys lesen (Offboarding-Flow) Co-Authored-By: Claude Sonnet 4.6 --- backend/src/middleware/roleCheck.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/backend/src/middleware/roleCheck.js b/backend/src/middleware/roleCheck.js index c47511b..04e862a 100644 --- a/backend/src/middleware/roleCheck.js +++ b/backend/src/middleware/roleCheck.js @@ -64,14 +64,14 @@ function canModifyFidoKeys(req, res, next) { * Check if user can view FIDO keys (all authenticated users) */ function canViewFidoKeys(req, res, next) { - return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.BEARBEITER, ROLES.BENUTZER])(req, res, next); + return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.BEARBEITER, ROLES.BENUTZER, ROLES.HR_PERSONAL, ROLES.SUPPORT])(req, res, next); } /** * Check if user can view assets (Super Admin, Admin, Bearbeiter) */ function canViewAssets(req, res, next) { - return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.TECHNIKER])(req, res, next); + return requireRole([ROLES.SUPER_ADMIN, ROLES.ADMIN, ROLES.TECHNIKER, ROLES.HR_PERSONAL, ROLES.SUPPORT, ROLES.BEARBEITER])(req, res, next); } /**