From 858c02a6bbbcb87d224ef1e456709384a67e977d Mon Sep 17 00:00:00 2001
From: Sacha Al Himdani <sacha@getprobo.com>
Date: Thu, 19 Feb 2026 14:27:30 +0100
Subject: [PATCH] Add access to SOA for auditor

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
---
 pkg/probo/policies.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkg/probo/policies.go b/pkg/probo/policies.go
index 30bdd4b06..4783bdf58 100644
--- a/pkg/probo/policies.go
+++ b/pkg/probo/policies.go
@@ -142,11 +142,17 @@ var AuditorPolicy = policy.NewPolicy(
 		ActionSnapshotGet, ActionSnapshotList,
 		ActionMeetingGet, ActionMeetingList,
 		ActionFileGet, ActionFileDownloadUrl,
+		ActionStateOfApplicabilityGet, ActionStateOfApplicabilityList,
+		ActionApplicabilityStatementGet, ActionApplicabilityStatementList,
 	).WithSID("entity-read-access").When(organizationCondition),
 
 	policy.Allow(
 		ActionDocumentVersionExportPDF, ActionDocumentVersionExportSignable, ActionDocumentVersionSign,
 	).WithSID("document-signing").When(organizationCondition),
+
+	policy.Allow(
+		ActionStateOfApplicabilityExport,
+	).WithSID("soa-export").When(organizationCondition),
 ).WithDescription("Read-only probo access for auditors (excludes internal/employee content)")
 
 // EmployeePolicy defines permissions for employee role.