Merge pull request #340 from groombook/fix/gro-805-invoices-rbac

Merge groomer RBAC fix into dev. cc @cpfarhood
This commit was merged in pull request #340.
This commit is contained in:
groombook-engineer[bot]
2026-04-18 11:00:57 +00:00
committed by GitHub
+1 -1
View File
@@ -202,7 +202,7 @@ api.on(["POST", "PATCH", "DELETE"], "/staff/*", requireRoleOrSuperUser("manager"
api.use("/admin/*", requireRoleOrSuperUser("manager"));
api.use("/admin/settings/*", requireSuperUser());
api.use("/reports/*", requireRole("manager"));
api.use("/invoices/*", requireRole("manager"));
api.use("/invoices/*", requireRole("manager", "groomer"));
api.use("/impersonation/*", requireRole("manager"));
// Manager + Receptionist only (groomers have no access): appointment-groups, grooming-logs, waitlist