FIX: sending access token to role function to evaluate editing permissions

src/authentication/authentication.guard.ts

@@ -121,6 +121,7 @@ export class AuthenticationGuard
       customer_id: accessTokenPayload.customer_id,
       customer_name: accessTokenPayload.customer_name,
       customer_tier: accessTokenPayload.customer_tier,
+      access_token: accessToken,
     };
     // TODO: for backwards compatibility. remove in the future
     request.body.info = {

src/authentication/user.decorator.ts

@@ -10,6 +10,7 @@ export interface RequestUser {
   customer_id: string;
   customer_name: string;
   customer_tier: string;
+  access_token: string;
 }
 
 export const User: (options?: { required?: boolean }) => ParameterDecorator =