From a4645fbb128cc18a45f905c7efa80336376c9ebd Mon Sep 17 00:00:00 2001
From: Artem Niehrieiev <r.tem@tuta.io>
Date: Fri, 31 Oct 2025 10:36:08 +0000
Subject: [PATCH] fix: update guards in TableCategoriesController for improved
 access control

---
 .../table-categories/table-categories.controller.ts         | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/backend/src/entities/table-categories/table-categories.controller.ts b/backend/src/entities/table-categories/table-categories.controller.ts
index 1c0787dc5..7bc2b51e4 100644
--- a/backend/src/entities/table-categories/table-categories.controller.ts
+++ b/backend/src/entities/table-categories/table-categories.controller.ts
@@ -3,14 +3,14 @@ import { ApiBearerAuth, ApiBody, ApiOperation, ApiParam, ApiResponse, ApiTags }
 import { UseCaseType } from '../../common/data-injection.tokens.js';
 import { MasterPassword } from '../../decorators/master-password.decorator.js';
 import { SlugUuid } from '../../decorators/slug-uuid.decorator.js';
+import { InTransactionEnum } from '../../enums/in-transaction.enum.js';
 import { ConnectionEditGuard } from '../../guards/connection-edit.guard.js';
-import { ConnectionReadGuard } from '../../guards/connection-read.guard.js';
+import { TablesReceiveGuard } from '../../guards/tables-receive.guard.js';
 import { SentryInterceptor } from '../../interceptors/sentry.interceptor.js';
 import { CreateOrUpdateTableCategoriesDS } from './data-sctructures/create-or-update-table-categories.ds.js';
 import { CreateTableCategoryDto } from './dto/create-table-category.dto.js';
 import { FoundTableCategoryRo } from './dto/found-table-category.ro.js';
 import { ICreateTableCategories, IFindTableCategories } from './use-cases/table-categories-use-cases.interface.js';
-import { InTransactionEnum } from '../../enums/in-transaction.enum.js';
 
 @UseInterceptors(SentryInterceptor)
 @Controller('table-categories')
@@ -57,7 +57,7 @@ export class TableCategoriesController {
     isArray: true,
   })
   @ApiParam({ name: 'connectionId', required: true })
-  @UseGuards(ConnectionReadGuard)
+  @UseGuards(TablesReceiveGuard)
   @Get('/:connectionId')
   async findTableCategories(@SlugUuid('connectionId') connectionId: string): Promise<Array<FoundTableCategoryRo>> {
     return await this.findTableCategoriesUseCase.execute(connectionId);