FIX: no permission needed for sharing data assets

src/modules/catalog/catalog.controller.ts

@@ -2,6 +2,7 @@ import {
   Body,
   Controller,
   Delete,
+  ForbiddenException,
   Get,
   HttpException,
   Inject,
@@ -21,6 +22,7 @@ import { RequestUser, User } from 'src/authentication/user.decorator';
 @ApiTags('Catalog')
 @Controller('catalog')
 @AuthenticateCondition((req, user) => {
+  if (req.path.includes('/manage_permissions/')) return true;
   let action;
 
   switch (req.method) {
@@ -264,9 +266,8 @@ export class CatalogController {
         return res;
       }
 
-      throw new HttpException(
+      throw new ForbiddenException(
         'You do not have permission to access this data asset.',
-        403,
       );
     }
   }