diff --git a/src/SFA.DAS.Reservations.Web/Controllers/ManageReservationsController.cs b/src/SFA.DAS.Reservations.Web/Controllers/ManageReservationsController.cs index b45fa9bca..a331539c6 100644 --- a/src/SFA.DAS.Reservations.Web/Controllers/ManageReservationsController.cs +++ b/src/SFA.DAS.Reservations.Web/Controllers/ManageReservationsController.cs @@ -162,6 +162,7 @@ public async Task ProviderManage(ReservationsRouteModel routeMode } [Authorize(Policy = nameof(PolicyNames.HasProviderGotContributorOrHigherRoleOrIsEmployer))] + [Authorize(Policy = nameof(PolicyNames.HasProviderOrEmployerAccount))] [Route("{ukPrn}/reservations/{id}/delete", Name = RouteNames.ProviderDelete)] [Route("accounts/{employerAccountId}/reservations/{id}/delete", Name = RouteNames.EmployerDelete)] public async Task Delete(ReservationsRouteModel routeModel)