feat: check ability

MuNuChapterHKN · May 30, 2024 · c9c30fb · c9c30fb
1 parent 1afe269
commit c9c30fb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/api/src/timeslots/timeslots.controller.ts b/api/src/timeslots/timeslots.controller.ts
@@ -6,6 +6,8 @@ import {
   ApiUnauthorizedResponse,
 } from '@nestjs/swagger';
 import { TimeSlot } from './timeslot.entity';
+import { CheckPolicies } from 'src/authorization/check-policies.decorator';
+import { Action } from '@hkrecruitment/shared';
 
 @ApiBearerAuth()
 @ApiTags('timeslots')
@@ -14,6 +16,7 @@ export class TimeSlotsController {
   constructor(private readonly timeSlotsService: TimeSlotsService) {}
 
   @ApiUnauthorizedResponse()
+  @CheckPolicies((ability) => ability.can(Action.Read, 'TimeSlot'))
   @Get()
   async findAvailableTimeSlots(): Promise<TimeSlot[]> {
     return await this.timeSlotsService.findAvailableTimeSlots();