Init

internal/router/router.go

@@ -55,6 +55,7 @@ func (r *Router) Init() *gin.Engine {
 		middleware.Recover(),
 		middleware.HTTPStatLogger(),
 		middleware.PopulateContext(),
+		middleware.CORS(),
 	)
 
 	r.addAppRoutes(engine)
@@ -76,7 +77,7 @@ func (r *Router) addAppRoutes(rg *gin.Engine) {
 		users := v1.Group("/users")
 		users.Use(r.authMiddleware.RequireAuth())
 		{
-			users.GET("", r.authMiddleware.RequirePermissions("user.view"), r.userHandler.ListUsers)
+			users.GET("", r.authMiddleware.RequirePermissions("user.read"), r.userHandler.ListUsers)
 			users.GET("/profile", r.userHandler.GetProfile)
 			users.PUT("/profile", r.userHandler.UpdateProfile)
 			users.PUT(":id/password", r.userHandler.ChangePassword)