From 46481ef1ece5452276603b3678c9d372fbfd63d5 Mon Sep 17 00:00:00 2001
From: waruneeauy <warunee.auy@gmail.com>
Date: Fri, 27 Feb 2026 22:22:10 +0700
Subject: [PATCH] fix permission

---
 Controllers/RecruitController.cs | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/Controllers/RecruitController.cs b/Controllers/RecruitController.cs
index 925f4af..826b208 100644
--- a/Controllers/RecruitController.cs
+++ b/Controllers/RecruitController.cs
@@ -445,7 +445,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         {
             try
             {
-                var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST");
+                var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST_PERIOD");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -522,7 +522,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         {
             try
             {
-                var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_EXAM_CONTEST");
+                var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_EXAM_CONTEST_PERIOD");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -631,7 +631,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         {
             try
             {
-                var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_EXAM_CONTEST");
+                var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_EXAM_CONTEST_PERIOD");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -902,7 +902,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         {
             try
             {
-                var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_EXAM_CONTEST");
+                var getPermission = await _permission.GetPermissionAPIAsync("DELETE", "SYS_EXAM_CONTEST_PERIOD");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -972,7 +972,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         {
             try
             {
-                var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_EXAM_CONTEST");
+                var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_EXAM_CONTEST_PERIOD");
                 var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
                 if (jsonData["status"]?.ToString() != "200")
                 {
@@ -1009,7 +1009,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> ImportCandidateFileByIdAsync(Guid id)
         {
-            var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST");
+            var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST_PERIOD");
             var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
             if (jsonData["status"]?.ToString() != "200")
             {
@@ -1278,7 +1278,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> ImportScoreFileAsync(Guid id)
         {
-            var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST");
+            var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST_PERIOD");
             var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
             if (jsonData["status"]?.ToString() != "200")
             {
@@ -1513,7 +1513,7 @@ namespace BMA.EHR.Recruit.Service.Controllers
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         public async Task<ActionResult<ResponseObject>> ImportResultFileAsync(Guid id)
         {
-            var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST");
+            var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_EXAM_CONTEST_PERIOD");
             var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
             if (jsonData["status"]?.ToString() != "200")
             {