[ERSSUP-89806]-[]-[Swapped user-restricted business function validation to look for new app-restricted business functions]-[JW]

Author: nhsd-jack-wainwright

proxies/live/apiproxy/targets/ers-target.xml

@@ -156,7 +156,7 @@
             <Condition>(accesstoken.auth_type == "user")</Condition>
             <Request><!--AUTHORISED_APPLICATION business function is not supported in user restricted flow --><Step>
                     <Name>RaiseFault.403Forbidden</Name>
-                    <Condition>(request.header.nhsd-ers-business-function == "AUTHORISED_APPLICATION")</Condition>
+                    <Condition>(request.header.nhsd-ers-business-function == "PROVIDER_AUTHORISED_APPLICATION") or (request.header.nhsd-ers-business-function == "REFERRER_AUTHORISED_APPLICATION")</Condition>
                 </Step> <Step>
                     <Name>AssignMessage.Set.x-ers-access-mode-header-user-restricted</Name>
                 </Step> <Step>