From 4e67bba5a91180a291237b32564e11240172d2d0 Mon Sep 17 00:00:00 2001
From: Bryan Frimin <bryan@getprobo.com>
Date: Thu, 27 Nov 2025 16:37:27 +0100
Subject: [PATCH] Fix trust center permissions

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
---
 pkg/authz/permissions.go | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/pkg/authz/permissions.go b/pkg/authz/permissions.go
index 0d698a1f5..0108041ae 100644
--- a/pkg/authz/permissions.go
+++ b/pkg/authz/permissions.go
@@ -605,6 +605,7 @@ var Permissions = map[uint16]map[Action][]Role{
 		ActionGetOrganization: AllRoles,
 		ActionGetSnapshot:     AllRoles,
 		ActionDownloadUrl:     AllRoles,
+		ActionAudit:           AllRoles,
 	},
 	coredata.NonconformityEntityType: {
 		ActionGet:             AllRoles,
@@ -669,8 +670,9 @@ var Permissions = map[uint16]map[Action][]Role{
 	},
 	coredata.TrustCenterDocumentAccessEntityType: {
 		ActionGet:             AllRoles,
-		ActionReport:          AllRoles,
-		ActionTrustCenterFile: AllRoles,
+		ActionDocument:        {RoleOwner, RoleAdmin},
+		ActionReport:          {RoleOwner, RoleAdmin},
+		ActionTrustCenterFile: {RoleOwner, RoleAdmin},
 	},
 	coredata.MeetingEntityType: {
 		ActionGet:             AllRoles,