From 8cb0b3dffc2879a300c4e65d88a5bf12c7306d38 Mon Sep 17 00:00:00 2001
From: michaelschal <35957947-michaelschal@users.noreply.replit.com>
Date: Tue, 12 Aug 2025 13:43:16 +0000
Subject: [PATCH] Update order and delivery views to allow director access

Remove specific permission checks from order and delivery API endpoints, relying on a centralized permission system.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: b163d4c0-de5e-4f4e-a9c0-aed4c7049718
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/1957c339-2757-4d1f-8e92-e9f71a1ce58e/b163d4c0-de5e-4f4e-a9c0-aed4c7049718/50k5WjY
---
 server/routes.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/routes.ts b/server/routes.ts
index c3a9a43..09a037c 100644
--- a/server/routes.ts
+++ b/server/routes.ts
@@ -311,7 +311,7 @@ export async function registerRoutes(app: Express): Promise<Server> {
   });
 
   // Orders routes
-  app.get('/api/orders', isAuthenticated, requirePermission('orders', 'view'), async (req: any, res) => {
+  app.get('/api/orders', isAuthenticated, async (req: any, res) => {
     try {
       const user = await storage.getUserWithGroups(req.user.claims ? req.user.claims.sub : req.user.id);
       if (!user) {
@@ -584,7 +584,7 @@ export async function registerRoutes(app: Express): Promise<Server> {
   });
 
   // Deliveries routes
-  app.get('/api/deliveries', isAuthenticated, requirePermission('deliveries', 'view'), async (req: any, res) => {
+  app.get('/api/deliveries', isAuthenticated, async (req: any, res) => {
     try {
       const user = await storage.getUserWithGroups(req.user.claims ? req.user.claims.sub : req.user.id);
       if (!user) {