apps/backend/src/data/permissions.ts

@@ -113,6 +113,18 @@ const permissionsData = [
 	{
 		code: "assessments.updateAnswer",
 	},
+	{
+		code: "assessments.readAverageSubAspect",
+	},
+	{
+		code: "assessments.readAverageAllSubAspects",
+	},
+	{
+		code: "assessments.readAverageAspect",
+	},
+	{
+		code: "assessments.readAverageAllAspects",
+	},
 ] as const;
 
 export type SpecificPermissionCode = (typeof permissionsData)[number]["code"];

apps/backend/src/routes/assessments/route.ts

@@ -409,7 +409,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
     // Get data for One Sub Aspect average score By Sub Aspect Id and Assessment Id
     .get(
         '/average-score/sub-aspects/:subAspectId/assessments/:assessmentId', 
-        // checkPermission("assessments.readAssessmentScore"),
+        checkPermission("assessments.readAverageSubAspect"), 
         async (c) => {
             const { subAspectId, assessmentId } = c.req.param();
         
@@ -440,7 +440,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
      // Get data for All Sub Aspects average score By Assessment Id
     .get(
         '/average-score/sub-aspects/assessments/:assessmentId', 
-        // checkPermission("assessments.readAssessmentScore"),
+        checkPermission("assessments.readAverageAllSubAspects"), 
         async (c) => {
             const { assessmentId } = c.req.param();
         
@@ -472,6 +472,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
     // Get data for One Aspect average score By Aspect Id and Assessment Id
     .get(
         "/average-score/aspects/:aspectId/assessments/:assessmentId", 
+        checkPermission("assessments.readAverageAspect"), 
         async (c) => {
             const { aspectId, assessmentId } = c.req.param();
         
@@ -503,7 +504,7 @@ const assessmentsRoute = new Hono<HonoEnv>()
     // Get data for All Aspects average score By Assessment Id
     .get(
         '/average-score/aspects/assessments/:assessmentId', 
-        // checkPermission("assessments.readAssessmentScore"),
+        checkPermission("assessments.readAverageAllAspects"), 
         async (c) => {
             const { assessmentId } = c.req.param();