payment

src/modules/invoice/invoice.controller.ts

@@ -50,12 +50,14 @@ export class InvoiceController {
   @Get('admin/invoice')
   @UseGuards(AdminAuthGuard)
   @ApiOperation({ summary: 'Get all invoices with pagination and filters' })
+  @Permissions(PermissionEnum.VIEW_INVOICES)
   findAllAsAdmin(@Query() dto: FindInvoicesDto) {
     return this.invoiceService.findAllAsAdmin(dto);
   }
 
   @Get('admin/invoice/:id')
   @UseGuards(AdminAuthGuard)
+  @Permissions(PermissionEnum.VIEW_INVOICES)
   @ApiOperation({ summary: 'Get one invoice by id (admin)' })
   findOneAsAdmin(@Param('id') id: string) {
     return this.invoiceService.findOneAsAdmin(id);
@@ -65,7 +67,7 @@ export class InvoiceController {
   @UseGuards(AdminAuthGuard)
   @Permissions(PermissionEnum.UPDATE_INVOICE)
   @ApiOperation({ summary: 'Update an invoice (admin)' })
-  @ApiBody({ type: UpdateInvoiceDto })
+  @Permissions(PermissionEnum.UPDATE_INVOICE)
   update(@Param('id') id: string, @Body() updateInvoiceDto: UpdateInvoiceDto) {
     return this.invoiceService.update(id, updateInvoiceDto);
   }