| @@ -833,10 +833,10 @@ | ||
| 833 | 833 | }); |
| 834 | 834 | |
| 835 | 835 | $router->post('/upload-editor-file', [FileUploadController::class, 'uploadEditorFile'])->withPolicy('AdminPolicy'); |
| 836 | 836 | |
| 837 | -$router->prefix('notes')->withPolicy('AdminPolicy')->group(function (Router $router) { | |
| 838 | - $router->post('/attach', [NotesController::class, 'attach']); | |
| 837 | +$router->prefix('notes')->withPolicy('OrderPolicy')->group(function (Router $router) { | |
| 838 | + $router->post('/attach', [NotesController::class, 'attach'])->meta(['permissions' => 'orders/manage']); | |
| 839 | 839 | }); |
| 840 | 840 | |
| 841 | 841 | $router->prefix('app')->withPolicy('AdminPolicy')->group(function (Router $router) { |
| 842 | 842 | $router->get('init', [AppController::class, 'init']); |