diff --git a/pkg/authz/permissions.go b/pkg/authz/permissions.go index aa855aa12..5ce1a8c9a 100644 --- a/pkg/authz/permissions.go +++ b/pkg/authz/permissions.go @@ -527,13 +527,18 @@ var Permissions = map[uint16]map[Action][]Role{ ActionCancelSignatureRequest: EditRoles, }, coredata.DocumentVersionEntityType: { - ActionGet: AllRoles, - ActionGetFile: AllRoles, - ActionGetOwner: AllRoles, - ActionDocument: AllRoles, - ActionSignatures: AllRoles, + ActionGet: AllRoles, + ActionGetFile: AllRoles, + ActionGetOwner: AllRoles, + ActionDocument: AllRoles, + ActionSignatures: AllRoles, + ActionExportDocumentVersionPDF: AllRoles, - ActionUpdateDocumentVersion: EditRoles, + ActionUpdateDocumentVersion: EditRoles, + ActionRequestSignature: EditRoles, + ActionBulkRequestSignatures: EditRoles, + ActionSendSigningNotifications: EditRoles, + ActionCancelSignatureRequest: EditRoles, }, coredata.DocumentVersionSignatureEntityType: { ActionGet: AllRoles, diff --git a/pkg/authz/service.go b/pkg/authz/service.go index e51e3b03e..0548a43bc 100644 --- a/pkg/authz/service.go +++ b/pkg/authz/service.go @@ -847,8 +847,9 @@ func (s *TenantAuthzService) Authorize( ) error { requiredRoles := GetPermissionsForAction(entityGID.EntityType(), action) if requiredRoles == nil { + entityModel, _ := coredata.EntityModel(entityGID.EntityType()) return &PermissionDeniedError{ - Message: fmt.Sprintf("no permissions defined for action %s on entity type %d", action, entityGID.EntityType()), + Message: fmt.Sprintf("no permissions defined for action %s on entity %s", action, entityModel), } }