From fef5f519c6eca9f51d668df06c427713d76c63e2 Mon Sep 17 00:00:00 2001
From: imperosol <thgirod@hotmail.com>
Date: Fri, 6 Nov 2026 13:32:24 +0100
Subject: [PATCH] Better permission for `/api/counter/search/detailed`

---
 counter/api.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/counter/api.py b/counter/api.py
index 9ab60437..eb35c0cb 100644
--- a/counter/api.py
+++ b/counter/api.py
@@ -22,7 +22,7 @@ from ninja_extra.pagination import PageNumberPaginationExtra
 from ninja_extra.schemas import PaginatedResponseSchema
 
 from api.auth import ApiKeyAuth
-from api.permissions import CanAccessLookup, CanView, IsInGroup, IsRoot
+from api.permissions import CanAccessLookup, CanView, HasPerm, IsInGroup, IsRoot
 from counter.models import Counter, Product, ProductType
 from counter.schemas import (
     CounterFilterSchema,
@@ -93,7 +93,7 @@ class ProductController(ControllerBase):
     @route.get(
         "/search/detailed",
         response=PaginatedResponseSchema[ProductSchema],
-        permissions=[IsCounterAdmin],
+        permissions=[HasPerm("counter.view_product")],
         url_name="search_products_detailed",
     )
     @paginate(PageNumberPaginationExtra, page_size=50)