Fixed wrong API permission

Viewing store payment methods needs CanViewStoreSettings instead of CanModifyStoreSettings as per the docs
This commit is contained in:
Wouter Samaey 2021-09-22 14:31:00 +02:00 committed by Andrew Camilleri
parent 4b34090376
commit 7cad6302b7

View file

@ -23,7 +23,7 @@ namespace BTCPayServer.Controllers.GreenField
_btcPayNetworkProvider = btcPayNetworkProvider;
}
[Authorize(Policy = Policies.CanModifyStoreSettings, AuthenticationSchemes = AuthenticationSchemes.Greenfield)]
[Authorize(Policy = Policies.CanViewStoreSettings, AuthenticationSchemes = AuthenticationSchemes.Greenfield)]
[HttpGet("~/api/v1/stores/{storeId}/payment-methods")]
public ActionResult<Dictionary<string, GenericPaymentMethodData>> GetStorePaymentMethods(
string storeId,