Add access to SOA for auditor

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/probo/policies.go

@@ -142,11 +142,17 @@ var AuditorPolicy = policy.NewPolicy(
 		ActionSnapshotGet, ActionSnapshotList,
 		ActionMeetingGet, ActionMeetingList,
 		ActionFileGet, ActionFileDownloadUrl,
+		ActionStateOfApplicabilityGet, ActionStateOfApplicabilityList,
+		ActionApplicabilityStatementGet, ActionApplicabilityStatementList,
 	).WithSID("entity-read-access").When(organizationCondition),
 
 	policy.Allow(
 		ActionDocumentVersionExportPDF, ActionDocumentVersionExportSignable, ActionDocumentVersionSign,
 	).WithSID("document-signing").When(organizationCondition),
+
+	policy.Allow(
+		ActionStateOfApplicabilityExport,
+	).WithSID("soa-export").When(organizationCondition),
 ).WithDescription("Read-only probo access for auditors (excludes internal/employee content)")
 
 // EmployeePolicy defines permissions for employee role.