task-l.2

src/app/api/crm/settings/user-role-assignments/[id]/route.ts

@@ -23,7 +23,7 @@ type RouteProps = {
 export async function PATCH(request: NextRequest, props: RouteProps) {
   try {
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmRoleAssignmentManage
+      permission: PERMISSIONS.crmUserRoleAssignmentManage
     });
     const payload = updateAssignmentSchema.parse(await request.json());
     const { id } = await props.params;
@@ -65,7 +65,7 @@ export async function PATCH(request: NextRequest, props: RouteProps) {
 export async function DELETE(_request: NextRequest, props: RouteProps) {
   try {
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmRoleAssignmentManage
+      permission: PERMISSIONS.crmUserRoleAssignmentManage
     });
     const { id } = await props.params;
     await deleteCrmUserRoleAssignment(organization.id, session.user.id, id);

src/app/api/crm/settings/user-role-assignments/route.ts

@@ -21,7 +21,7 @@ const assignmentSchema = z.object({
 export async function GET() {
   try {
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmRoleAssignmentRead
+      permission: PERMISSIONS.crmUserRoleAssignmentRead
     });
     const data = await listResolvedCrmRoleAssignments(organization.id, session.user.id);
 
@@ -46,7 +46,7 @@ export async function GET() {
 export async function POST(request: NextRequest) {
   try {
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmRoleAssignmentManage
+      permission: PERMISSIONS.crmUserRoleAssignmentManage
     });
     const payload = assignmentSchema.parse(await request.json());
     const assignment = await createCrmUserRoleAssignment(