From a955b64462af1b1335688d4d7395bdeaa3c62a54 Mon Sep 17 00:00:00 2001
From: Joel Thomas <joel.thomas@trenser.com>
Date: Wed, 8 Apr 2026 10:51:48 +0530
Subject: [PATCH] Ensure Role based access

<UserStory> EMP002 : Deactivate Employee </UserStory>

<Changes>
- Ensure Role based access
</Changes>

<Review>
Smitha Mohan
</Review>
---
 .../Trenser.Zenvy/services/EmployeeManagementService.cpp         | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Trenser.Zenvy/Trenser.Zenvy/services/EmployeeManagementService.cpp b/Trenser.Zenvy/Trenser.Zenvy/services/EmployeeManagementService.cpp
index 022bf6e..fdd0c0b 100644
--- a/Trenser.Zenvy/Trenser.Zenvy/services/EmployeeManagementService.cpp
+++ b/Trenser.Zenvy/Trenser.Zenvy/services/EmployeeManagementService.cpp
@@ -98,6 +98,7 @@ void EmployeeManagementService::createEmployee(Enums::EmployeeType employeeType,
 
 bool EmployeeManagementService::deactivateEmployee(const std::string& id)
 {
+	util::enforceAuthorization(m_dataStore.getAuthenticatedEmployee()->getEmployeeType(), Enums::EmployeeType::ADMIN, Enums::EmployeeType::HR);
 	auto& employee = m_dataStore.getEmployees();
 	auto iterator = employee.find(id);
 	if (iterator == employee.end())