feat: Relaxed file upload authorization from 'Edit' to 'View' permission and updated the year input help text.

2026-02-26 17:08:52 +01:00
parent 16cb602d3a
commit f42c3fe9f2
3 changed files with 8 additions and 7 deletions
--- a/Server/Controllers/HallOfFameController.cs
+++ b/Server/Controllers/HallOfFameController.cs
@@ -201,7 +201,7 @@ namespace SZUAbsolventenverein.Module.HallOfFame.Controllers
            }
        }
        [HttpPost("upload")]
-        [Authorize(Policy = PolicyNames.EditModule)]
+        [Authorize(Policy = PolicyNames.ViewModule)]
        public async Task<IActionResult> Upload(IFormFile file)
        {
            if (file == null || file.Length == 0) return BadRequest("Keine Datei ausgewählt.");