From 10ac58929fe006486cd46322341ed5164232b40d Mon Sep 17 00:00:00 2001
From: HMS17 <hms243@cornell.edu>
Date: Fri, 30 Aug 2024 18:54:58 -0400
Subject: [PATCH] [BI-2295] - Allow Experimental Collaborators To View
 Collaborators

---
 .../breedinginsight/api/v1/controller/ExperimentController.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/org/breedinginsight/api/v1/controller/ExperimentController.java b/src/main/java/org/breedinginsight/api/v1/controller/ExperimentController.java
index 46c32a871..b9f58708a 100644
--- a/src/main/java/org/breedinginsight/api/v1/controller/ExperimentController.java
+++ b/src/main/java/org/breedinginsight/api/v1/controller/ExperimentController.java
@@ -219,7 +219,7 @@ public HttpResponse<Response<ExperimentProgramUserRoleEntity>> createExperimenta
      *  Response includes name and email as a convenience to the front end to avoid making another api call
      */
     @Get("/${micronaut.bi.api.version}/programs/{programId}/experiments/{experimentId}/collaborators{?active}")
-    @ProgramSecured(roles = {ProgramSecuredRole.PROGRAM_ADMIN, ProgramSecuredRole.SYSTEM_ADMIN})
+    @ProgramSecured(roles = {ProgramSecuredRole.PROGRAM_ADMIN, ProgramSecuredRole.SYSTEM_ADMIN, ProgramSecuredRole.EXPERIMENTAL_COLLABORATOR, ProgramSecuredRole.READ_ONLY})
     @Produces(MediaType.APPLICATION_JSON)
     public HttpResponse<Response<DataResponse<List<ExperimentalCollaboratorResponse>>>> getExperimentalCollaborators(
             @PathVariable("programId") UUID programId,