From 3367b7d9357f439a940f38aa1e3eb92153df30b7 Mon Sep 17 00:00:00 2001
From: Jaanu423 <puja.mourya575@gmail.com>
Date: Tue, 23 Jun 2026 10:48:46 +0530
Subject: [PATCH] fix(election): seed missing permissions in Liquibase
 migration 0337
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add 5 permissions that the write service enforces but were absent from
the DB seed: UPDATE_ELECTION, ELIGIBILITY_CHECK_ELECTION,
CEO_PRECHECK_ELECTION, APPROVE_ELECTION_NOMINATION,
APPROVE_ELECTION_CANDIDATE — without these, role assignments for those
operations would fail at runtime.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../parts/0337_create_election_module.xml     | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/fineract-provider/src/main/resources/db/changelog/tenant/parts/0337_create_election_module.xml b/fineract-provider/src/main/resources/db/changelog/tenant/parts/0337_create_election_module.xml
index d989cd33d..560cc33a7 100644
--- a/fineract-provider/src/main/resources/db/changelog/tenant/parts/0337_create_election_module.xml
+++ b/fineract-provider/src/main/resources/db/changelog/tenant/parts/0337_create_election_module.xml
@@ -385,6 +385,41 @@
             <column name="action_name" value="CREATE"/>
             <column name="can_maker_checker" valueBoolean="false"/>
         </insert>
+        <insert tableName="m_permission">
+            <column name="grouping" value="portfolio"/>
+            <column name="code" value="UPDATE_ELECTION"/>
+            <column name="entity_name" value="ELECTION"/>
+            <column name="action_name" value="UPDATE"/>
+            <column name="can_maker_checker" valueBoolean="false"/>
+        </insert>
+        <insert tableName="m_permission">
+            <column name="grouping" value="portfolio"/>
+            <column name="code" value="ELIGIBILITY_CHECK_ELECTION"/>
+            <column name="entity_name" value="ELECTION"/>
+            <column name="action_name" value="ELIGIBILITY_CHECK"/>
+            <column name="can_maker_checker" valueBoolean="false"/>
+        </insert>
+        <insert tableName="m_permission">
+            <column name="grouping" value="portfolio"/>
+            <column name="code" value="CEO_PRECHECK_ELECTION"/>
+            <column name="entity_name" value="ELECTION"/>
+            <column name="action_name" value="CEO_PRECHECK"/>
+            <column name="can_maker_checker" valueBoolean="false"/>
+        </insert>
+        <insert tableName="m_permission">
+            <column name="grouping" value="portfolio"/>
+            <column name="code" value="APPROVE_ELECTION_NOMINATION"/>
+            <column name="entity_name" value="ELECTION_NOMINATION"/>
+            <column name="action_name" value="APPROVE"/>
+            <column name="can_maker_checker" valueBoolean="false"/>
+        </insert>
+        <insert tableName="m_permission">
+            <column name="grouping" value="portfolio"/>
+            <column name="code" value="APPROVE_ELECTION_CANDIDATE"/>
+            <column name="entity_name" value="ELECTION_CANDIDATE"/>
+            <column name="action_name" value="APPROVE"/>
+            <column name="can_maker_checker" valueBoolean="false"/>
+        </insert>
     </changeSet>
 
 </databaseChangeLog>