From 88dc318a5c3109599005505d01b58c2689e05399 Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Fri, 23 Oct 2026 08:43:53 +0200
Subject: [PATCH 1/3] Fix missing permission check in dividends import endpoint

---
 apps/api/src/app/__snapshots__/app.module.spec.ts.snap | 1 +
 apps/api/src/app/endpoints/import/import.controller.ts | 1 +
 2 files changed, 2 insertions(+)

diff --git a/apps/api/src/app/__snapshots__/app.module.spec.ts.snap b/apps/api/src/app/__snapshots__/app.module.spec.ts.snap
index f5e8b793d4..188dd6e179 100644
--- a/apps/api/src/app/__snapshots__/app.module.spec.ts.snap
+++ b/apps/api/src/app/__snapshots__/app.module.spec.ts.snap
@@ -546,6 +546,7 @@ exports[`AppModule should keep the security of each route 1`] = `
       "TransformDataSourceInResponseInterceptor",
       "TransformDataSourceInRequestInterceptor",
     ],
+    "permission": "createActivity",
   },
   "GET /info": {
     "guards": [],
diff --git a/apps/api/src/app/endpoints/import/import.controller.ts b/apps/api/src/app/endpoints/import/import.controller.ts
index 846914bd03..dcb9844d3f 100644
--- a/apps/api/src/app/endpoints/import/import.controller.ts
+++ b/apps/api/src/app/endpoints/import/import.controller.ts
@@ -82,6 +82,7 @@ export class ImportController {
 
   @Get('dividends/:dataSource/:symbol')
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
+  @HasPermission(permissions.createActivity)
   @UseInterceptors(TransformDataSourceInRequestInterceptor)
   @UseInterceptors(TransformDataSourceInResponseInterceptor)
   public async gatherDividends(

From 5aa334f11ecb55c51551389974cd72620c2178df Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Fri, 23 Oct 2026 08:43:56 +0200
Subject: [PATCH 2/3] Update changelog

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 297677b966..766e928ef9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Improved the language localization for German (`de`)
 - Upgraded `prettier` from version `3.9.9` to `3.9.10`
 
+### Fixed
+
+- Fixed the missing permission check in the `GET api/v1/import/dividends/:dataSource/:symbol` endpoint
+
 ## 3.90.0 - 2026-10-21
 
 ### Changed

From a4390d1b0d965345b0ca5294f9b1e1f15ee13c5f Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Fri, 23 Oct 2026 08:49:31 +0200
Subject: [PATCH 3/3] Update changelog

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 766e928ef9..b6c9c0a6ef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,7 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- Fixed the missing permission check in the `GET api/v1/import/dividends/:dataSource/:symbol` endpoint
+- Added the missing permission check in the `GET api/v1/import/dividends/:dataSource/:symbol` endpoint
 
 ## 3.90.0 - 2026-10-21