From fafbc55732e01cf40e8c5a47ab10b372710cb81d Mon Sep 17 00:00:00 2001
From: Florian Mihalits <mihalits@creativebits.com>
Date: Mon, 11 Aug 2025 18:01:46 +0200
Subject: [PATCH] Change authorization policy for EditCustomer method

Updated the authorization policy for the `EditCustomer` method in the `AdvertisementController` to allow access only to users with the "Customer" role, replacing the previous "Power User" role requirement.
---
 gehGassi.Web/Controllers/AdvertisementController.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gehGassi.Web/Controllers/AdvertisementController.cs b/gehGassi.Web/Controllers/AdvertisementController.cs
index a5b63bd..26b5718 100644
--- a/gehGassi.Web/Controllers/AdvertisementController.cs
+++ b/gehGassi.Web/Controllers/AdvertisementController.cs
@@ -776,7 +776,7 @@ namespace gehGassi.Web.Controllers
         /// </summary>
         /// <param name="model">Model</param>
         /// <returns>Json</returns>
-        [Authorize(Policy = Policies.PowerUserOnly)]
+        [Authorize(Policy = Policies.CustomerOnly)]
         [HasPermission(Permission.AdvertisementsManage, Permission.AdvertisementsEdit)]
         [CustomerAuthorize("CustomerId")]
         [ValidateAntiForgeryToken]