We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 944da76 commit cd2688eCopy full SHA for cd2688e
1 file changed
src/backend/src/services/reimbursement-requests.services.ts
@@ -591,10 +591,9 @@ export default class ReimbursementRequestService {
591
if (reimbursementRequest.dateDeleted) {
592
throw new DeletedException('Reimbursement Request', reimbursementRequestId);
593
}
594
-
595
- if (reimbursementRequest.recipientId !== submitter.userId) {
+ if (reimbursementRequest.recipientId !== submitter.userId && !(await isUserLeadOrHeadOfFinanceTeam(submitter))) {
596
throw new AccessDeniedException(
597
- 'You do not have access to upload a receipt for this reimbursement request, only the creator can edit a reimbursement request'
+ 'You do not have access to upload a receipt for this reimbursement request, only the creator or a finance lead can edit a reimbursement request'
598
);
599
600
0 commit comments