diff --git a/src/main/java/de/avatic/lcc/controller/configuration/MaterialController.java b/src/main/java/de/avatic/lcc/controller/configuration/MaterialController.java index 5bc9671..542f131 100644 --- a/src/main/java/de/avatic/lcc/controller/configuration/MaterialController.java +++ b/src/main/java/de/avatic/lcc/controller/configuration/MaterialController.java @@ -37,7 +37,7 @@ public class MaterialController { * X-Total-Count (total elements), X-Page-Count (total pages), and X-Current-Page (current page). */ @GetMapping("/") - @PreAuthorize("hasRole('SUPER')") + @PreAuthorize("hasAnyRole('SUPER', 'CALCULATION', 'BASIC', 'FREIGHT', 'PACKAGING')") public ResponseEntity> listMaterials( @RequestParam(defaultValue = "true") String excludeDeprecated, @RequestParam(defaultValue = "20") @Min(1) int limit, @@ -61,7 +61,7 @@ public class MaterialController { * @throws RuntimeException if the material with the given ID is not found. */ @GetMapping("/{id}") - @PreAuthorize("hasRole('SUPER')") + @PreAuthorize("hasAnyRole('SUPER', 'CALCULATION', 'BASIC', 'FREIGHT', 'PACKAGING')") public ResponseEntity getMaterialDetails(@PathVariable Integer id) { return ResponseEntity.ok(materialService.getMaterial(id)); }