payment

src/modules/order/controllers/order.controller.ts

@@ -55,6 +55,7 @@ export class OrderController {
   // Permission handled inside service
   @Get('admin/orders')
   @UseGuards(AdminAuthGuard)
+  @Permissions(PermissionEnum.VIEW_ORDERS)
   @ApiOperation({ summary: 'Get all orders with pagination and filters' })
   findAllAsAdmin(@Query() dto: FindOrdersDto, @AdminId() adminId: string) {
     return this.orderService.findOrdersAsAdmin(adminId, dto);
@@ -62,6 +63,7 @@ export class OrderController {
 
   @Get('admin/orders/:id')
   @UseGuards(AdminAuthGuard)
+  @Permissions(PermissionEnum.VIEW_ORDERS)
   @ApiOperation({ summary: 'order detail' })
   orderDetailAsAdmin(@Param('id') orderId: string) {
     return this.orderService.findOrderOrFail(orderId);
@@ -112,6 +114,7 @@ export class OrderController {
 
   @Get('admin/orders/:orderId/print')
   @UseGuards(AdminAuthGuard)
+  @Permissions(PermissionEnum.VIEW_PRINT)
   @ApiOperation({ summary: 'Get order print' })
   getPrint(@Param('orderId') orderId: string) {
     return this.orderService.getPrint(orderId);