Merge pull request #236 from SkillsFundingAgency/CON-3699-Viewer-user…

…-can-delete-a-reservation-in-EAS CON-3699 Viewer user can delete a reservation in EAS
SkillsFundingAgency · Jul 12, 2021 · f003502 · f003502
2 parents fc4c502 + 565aef1
commit f003502
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/SFA.DAS.Reservations.Web/Controllers/ManageReservationsController.cs b/src/SFA.DAS.Reservations.Web/Controllers/ManageReservationsController.cs
@@ -162,6 +162,7 @@ public async Task<IActionResult> ProviderManage(ReservationsRouteModel routeMode
         }
 
         [Authorize(Policy = nameof(PolicyNames.HasProviderGotContributorOrHigherRoleOrIsEmployer))]
+        [Authorize(Policy = nameof(PolicyNames.HasProviderOrEmployerAccount))]
         [Route("{ukPrn}/reservations/{id}/delete", Name = RouteNames.ProviderDelete)]
         [Route("accounts/{employerAccountId}/reservations/{id}/delete", Name = RouteNames.EmployerDelete)]
         public async Task<IActionResult> Delete(ReservationsRouteModel routeModel)