diff --git a/pkg/probo/policies.go b/pkg/probo/policies.go index 30bdd4b06..4783bdf58 100644 --- a/pkg/probo/policies.go +++ b/pkg/probo/policies.go @@ -142,11 +142,17 @@ var AuditorPolicy = policy.NewPolicy( ActionSnapshotGet, ActionSnapshotList, ActionMeetingGet, ActionMeetingList, ActionFileGet, ActionFileDownloadUrl, + ActionStateOfApplicabilityGet, ActionStateOfApplicabilityList, + ActionApplicabilityStatementGet, ActionApplicabilityStatementList, ).WithSID("entity-read-access").When(organizationCondition), policy.Allow( ActionDocumentVersionExportPDF, ActionDocumentVersionExportSignable, ActionDocumentVersionSign, ).WithSID("document-signing").When(organizationCondition), + + policy.Allow( + ActionStateOfApplicabilityExport, + ).WithSID("soa-export").When(organizationCondition), ).WithDescription("Read-only probo access for auditors (excludes internal/employee content)") // EmployeePolicy defines permissions for employee role.