From 351f55a3c70b4af3b5d0eab6aca603dea72fad2e Mon Sep 17 00:00:00 2001
From: swapnamol-abraham <swapnamol.abraham@nhs.net>
Date: Mon, 18 Aug 2025 12:34:50 +0100
Subject: [PATCH] Fixed the routing issues for the unauthorized user access

---
 .../LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs  | 2 +-
 .../LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs  | 2 +-
 .../LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs
index 15926b75e..73d406e27 100644
--- a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs
+++ b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs
@@ -13,7 +13,7 @@
     /// Catalogue controller.
     /// </summary>
     [Route("Catalogue")]
-    [Authorize]
+    [Authorize(Policy = "AuthorizeOrCallFromLH")]
     [ApiController]
     public class CatalogueController : OpenApiControllerBase
     {
diff --git a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs
index 7e42357d7..549f1f80d 100644
--- a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs
+++ b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs
@@ -17,7 +17,7 @@
     /// </summary>
     [Route("Hierarchy")]
     [ApiController]
-    [Authorize]
+    [Authorize(Policy = "AuthorizeOrCallFromLH")]
     public class HierarchyController : OpenApiControllerBase
     {
         private readonly IHierarchyService hierarchyService;
diff --git a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs
index 343906d96..b3a685de3 100644
--- a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs
+++ b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs
@@ -28,7 +28,7 @@ namespace LearningHub.NHS.OpenAPI.Controllers
     /// Resource controller.
     /// </summary>
     [Route("Resource")]
-    [Authorize]
+    [Authorize(Policy = "AuthorizeOrCallFromLH")]
     [ApiController]
     public class ResourceController : OpenApiControllerBase
     {