diff --git a/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs b/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs
index 38f6a89..8264c91 100644
--- a/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs
+++ b/src/comissions.app.api/Controllers/Admin/AdminSellerRequestsController.cs
@@ -29,7 +29,6 @@ public class AdminArtistRequestsController : Controller
/// The amount of records to return.
/// A list of seller profile requests
[HttpGet]
- [Authorize("read:seller-profile-request")]
public async Task GetArtistRequests(int offset = 0, int pageSize = 10)
{
var requests = _dbContext.ArtistRequests.Skip(offset).Take(pageSize).ToList();
@@ -42,7 +41,6 @@ public class AdminArtistRequestsController : Controller
///
/// The number of requests.
[HttpGet]
- [Authorize("read:seller-profile-request")]
[Route("Count")]
public async Task GetArtistRequestsCount()
{
@@ -56,7 +54,6 @@ public class AdminArtistRequestsController : Controller
/// The ID of the user to accept the request for.
/// The new seller profile.
[HttpPut]
- [Authorize("write:seller-profile-request")]
[Route("{userId}")]
public async Task AcceptArtistRequest(string userId)
{
diff --git a/src/comissions.app.api/Program.cs b/src/comissions.app.api/Program.cs
index 534e36f..1113265 100644
--- a/src/comissions.app.api/Program.cs
+++ b/src/comissions.app.api/Program.cs
@@ -12,7 +12,7 @@ using Microsoft.EntityFrameworkCore;
using Microsoft.Extensions.FileProviders;
using Microsoft.IdentityModel.Tokens;
using Microsoft.OpenApi.Models;
-
+
var builder = WebApplication.CreateBuilder(args);
// Add services to the container.
@@ -98,16 +98,19 @@ builder.Services.AddAuthorization(options =>
options.AddPolicy("read:user", policy => policy.Requirements.Add(new
HasScopeRequirement("read:user", builder.Configuration.GetValue("Auth0:Domain"))));
+
options.AddPolicy("write:user", policy => policy.Requirements.Add(new
HasScopeRequirement("write:user", builder.Configuration.GetValue("Auth0:Domain"))));
options.AddPolicy("read:artist", policy => policy.Requirements.Add(new
HasScopeRequirement("read:artist", builder.Configuration.GetValue("Auth0:Domain"))));
+
options.AddPolicy("write:artist", policy => policy.Requirements.Add(new
HasScopeRequirement("write:artist", builder.Configuration.GetValue("Auth0:Domain"))));
options.AddPolicy("read:request", policy => policy.Requirements.Add(new
HasScopeRequirement("read:request", builder.Configuration.GetValue("Auth0:Domain"))));
+
options.AddPolicy("write:request", policy => policy.Requirements.Add(new
HasScopeRequirement("write:request", builder.Configuration.GetValue("Auth0:Domain"))));
});