Fix backend merge fallout for booking and limited employees

2026-07-06 17:16:22 +02:00
parent e0ae74bdc2
commit 614715822f
3 changed files with 2 additions and 3 deletions
@@ -656,7 +656,7 @@ class orderBookingRoute

        if ($auth->get_subuser() !== false && $this->isOwnCustomerContext($targetCustomerNumber)) {
            $permissionOwn = self::definePermission('add_own_bookings', subusers_permission_node_key::BOOKINGS_ADD);
-            if (!self::hasPermission($permissionOwn)) {
+            if (!self::hasPermission($permissionOwn, $targetCustomerNumber)) {
                $this->emitForbidden([$permissionOwn]);
            }
            return;