Fix permissions

FlowFuse · Jan 16, 2025 · b27196d · b27196d
1 parent 50e0dac
commit b27196d
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/forge/ee/routes/teamBroker/index.js b/forge/ee/routes/teamBroker/index.js
@@ -448,8 +448,11 @@ module.exports = async function (app) {
      * @memberof forge.routes.api.team.broker
      */
     app.get('/:brokerId/credentials', {
-        // TODO Needs custom preHandler to work with token for mqtt agent only
-        // preHandler: app.needsPermission('broker:topics:list'),
+        preHandler: [
+            async (request, reply) => {
+                // TODO Needs custom preHandler to work with token for mqtt agent only
+            }
+        ],
         schema: {
             summary: 'Gets credentials for a 3rd party MQTT broker',
             tags: ['MQTT Broker'],
@@ -531,7 +534,7 @@ module.exports = async function (app) {
      * Remove 3rd Party Broker credentials
      */
     app.delete('/:brokerId/credentials', {
-        preHandler: app.needsPermission('broker:topics:delete'),
+        preHandler: app.needsPermission('broker:credentials:delete'),
         schema: {
             summary: 'Delete credentials for a 3rd party MQTT broker',
             tags: ['MQTT Broker'],