TT#100761 Allow subscribers to access /api/applyrewrites

* Give subscribers permissions to apply rewrites
	    but only for their own subscriber id

Change-Id: I6fdb449190169802ba8d3ed71effb41c60b00125

lib/NGCP/Panel/Controller/API/ApplyRewrites.pm

@@ -38,7 +38,7 @@ sub relation{
 }
 
 __PACKAGE__->set_config({
-    allowed_roles => [qw/admin reseller/],
+    allowed_roles => [qw/admin reseller subscriberadmin subscriber/],
 });
 
 sub POST :Allow {
@@ -76,6 +76,11 @@ sub POST :Allow {
             $self->error($c, HTTP_NOT_FOUND, "Calling subscriber not found.");
             last;
         }
+        if (($c->user->roles eq "subscriber" || $c->user->roles eq "subscriberadmin") && $subscriber->provisioning_voip_subscriber->id != $c->user->id) {
+            $c->log->error("Insuficient permissions to apply rewrites for subscriber id $$resource{subscriber_id}");
+            $self->error($c, HTTP_FORBIDDEN, "Insuficient permissions.");
+            return;
+        }
 
         my @result;
         try {