editoast: fix authz for search endpoint operationalpoint

Signed-off-by: Florian Amsallem <[email protected]>
OpenRailAssociation · Mar 6, 2025 · b095717 · b095717
1 parent 8590f5e
commit b095717
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/editoast/src/views/search.rs b/editoast/src/views/search.rs
@@ -351,9 +351,8 @@ async fn search(
     Json(SearchPayload { object, query, dry }): Json<SearchPayload>,
 ) -> Result<Json<serde_json::Value>> {
     let roles: HashSet<BuiltinRole> = match object.as_str() {
-        "track" | "operationalpoint" | "signal" => HashSet::from([BuiltinRole::OperationalStudies]),
-        "trainschedule" => HashSet::from([BuiltinRole::OperationalStudies, BuiltinRole::Stdcm]),
-        "project" | "study" | "scenario" => HashSet::from([BuiltinRole::OperationalStudies]),
+        "track" | "signal" | "project" | "study" | "scenario" => HashSet::from([BuiltinRole::OperationalStudies]),
+        "trainschedule" | "operationalpoint"  => HashSet::from([BuiltinRole::OperationalStudies, BuiltinRole::Stdcm]),
         _ => {
             return Err(SearchApiError::ObjectType {
                 object_type: object.to_owned(),