From 480709c32a15c0e1a905517d5b885b45410216be Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Fri, 9 May 2025 17:30:44 +0200
Subject: [PATCH] Bugfix/add missing permission guard in create watchlist item
 endpoint (#4686)

* Add missing permission guard

* Update changelog
---
 CHANGELOG.md                                                 | 4 ++++
 apps/api/src/app/endpoints/watchlist/watchlist.controller.ts | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4034fd9a..551a0d07 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Improved the language localization for Italian (`it`)
 - Upgraded `nestjs` from version `10.4.15` to `11.0.12`
 
+### Fixed
+
+- Fixed an issue in the watchlist endpoint (`POST`) related to the `HasPermissionGuard`
+
 ## 2.161.0 - 2025-05-06
 
 ### Added
diff --git a/apps/api/src/app/endpoints/watchlist/watchlist.controller.ts b/apps/api/src/app/endpoints/watchlist/watchlist.controller.ts
index 8d9d322a..2a8ea987 100644
--- a/apps/api/src/app/endpoints/watchlist/watchlist.controller.ts
+++ b/apps/api/src/app/endpoints/watchlist/watchlist.controller.ts
@@ -39,7 +39,7 @@ export class WatchlistController {
 
   @Post()
   @HasPermission(permissions.createWatchlistItem)
-  @UseGuards(AuthGuard('jwt'))
+  @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
   @UseInterceptors(TransformDataSourceInRequestInterceptor)
   public async createWatchlistItem(@Body() data: CreateWatchlistItemDto) {
     return this.watchlistService.createWatchlistItem({