From 15d223a76107a3b3a127fbc6ddd90c8d4373046a Mon Sep 17 00:00:00 2001
From: Sacha Al Himdani <sacha@getprobo.com>
Date: Mon, 17 Nov 2025 09:58:40 +0100
Subject: [PATCH] Fix invitation delete permission

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
---
 .../src/pages/organizations/settings/MembersSettingsTab.tsx    | 2 +-
 pkg/authz/permissions.go                                       | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/apps/console/src/pages/organizations/settings/MembersSettingsTab.tsx b/apps/console/src/pages/organizations/settings/MembersSettingsTab.tsx
index eb7ed867c..589d64f11 100644
--- a/apps/console/src/pages/organizations/settings/MembersSettingsTab.tsx
+++ b/apps/console/src/pages/organizations/settings/MembersSettingsTab.tsx
@@ -376,7 +376,7 @@ function InvitationRow(props: {
           {isDeleting ? (
             <Spinner size={16} />
           ) : (
-            <Authorized entity="Organization" action="deleteInvitation">
+            <Authorized entity="Invitation" action="deleteInvitation">
               <Button
                 variant="danger"
                 onClick={onDelete}
diff --git a/pkg/authz/permissions.go b/pkg/authz/permissions.go
index 5ce1a8c9a..06590c873 100644
--- a/pkg/authz/permissions.go
+++ b/pkg/authz/permissions.go
@@ -291,7 +291,6 @@ var Permissions = map[uint16]map[Action][]Role{
 		ActionDeleteOrganizationHorizontalLogo: EditRoles,
 		ActionCreateTrustCenter:                EditRoles,
 		ActionInviteUser:                       EditRoles,
-		ActionDeleteInvitation:                 EditRoles,
 		ActionUpdateMembership:                 EditRoles,
 		ActionCreatePeople:                     EditRoles,
 		ActionCreateVendor:                     EditRoles,
@@ -370,6 +369,8 @@ var Permissions = map[uint16]map[Action][]Role{
 	coredata.InvitationEntityType: {
 		ActionGet:             AllRoles,
 		ActionGetOrganization: AllRoles,
+
+		ActionDeleteInvitation: EditRoles,
 	},
 	coredata.PeopleEntityType: {
 		ActionGet: AllRoles,