From 44cf6737b5d58c96fba04625e1ac96ae1feb1166 Mon Sep 17 00:00:00 2001
From: Sacha Al Himdani <sacha@getprobo.com>
Date: Fri, 14 Nov 2025 16:32:58 +0100
Subject: [PATCH] Fix document permission

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
---
 pkg/authz/permissions.go | 17 +++++++++++------
 pkg/authz/service.go     |  3 ++-
 2 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/pkg/authz/permissions.go b/pkg/authz/permissions.go
index aa855aa12..5ce1a8c9a 100644
--- a/pkg/authz/permissions.go
+++ b/pkg/authz/permissions.go
@@ -527,13 +527,18 @@ var Permissions = map[uint16]map[Action][]Role{
 		ActionCancelSignatureRequest:      EditRoles,
 	},
 	coredata.DocumentVersionEntityType: {
-		ActionGet:        AllRoles,
-		ActionGetFile:    AllRoles,
-		ActionGetOwner:   AllRoles,
-		ActionDocument:   AllRoles,
-		ActionSignatures: AllRoles,
+		ActionGet:                      AllRoles,
+		ActionGetFile:                  AllRoles,
+		ActionGetOwner:                 AllRoles,
+		ActionDocument:                 AllRoles,
+		ActionSignatures:               AllRoles,
+		ActionExportDocumentVersionPDF: AllRoles,
 
-		ActionUpdateDocumentVersion: EditRoles,
+		ActionUpdateDocumentVersion:    EditRoles,
+		ActionRequestSignature:         EditRoles,
+		ActionBulkRequestSignatures:    EditRoles,
+		ActionSendSigningNotifications: EditRoles,
+		ActionCancelSignatureRequest:   EditRoles,
 	},
 	coredata.DocumentVersionSignatureEntityType: {
 		ActionGet:             AllRoles,
diff --git a/pkg/authz/service.go b/pkg/authz/service.go
index e51e3b03e..0548a43bc 100644
--- a/pkg/authz/service.go
+++ b/pkg/authz/service.go
@@ -847,8 +847,9 @@ func (s *TenantAuthzService) Authorize(
 ) error {
 	requiredRoles := GetPermissionsForAction(entityGID.EntityType(), action)
 	if requiredRoles == nil {
+		entityModel, _ := coredata.EntityModel(entityGID.EntityType())
 		return &PermissionDeniedError{
-			Message: fmt.Sprintf("no permissions defined for action %s on entity type %d", action, entityGID.EntityType()),
+			Message: fmt.Sprintf("no permissions defined for action %s on entity %s", action, entityModel),
 		}
 	}