From 219479959ef409aa1106fac4d7e975cfd48e644c Mon Sep 17 00:00:00 2001
From: DevEnv nis2-agile <dev@certisource.it>
Date: Tue, 10 Mar 2026 15:54:16 +0100
Subject: [PATCH] =?UTF-8?q?[FIX]=20InviteController=20requireRole=E2=86=92?=
 =?UTF-8?q?requireSuperAdmin=20+=20OnboardingController=20add=20RateLimitS?=
 =?UTF-8?q?ervice?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 application/controllers/InviteController.php     | 2 +-
 application/controllers/OnboardingController.php | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/application/controllers/InviteController.php b/application/controllers/InviteController.php
index f2be642..6cfe29a 100644
--- a/application/controllers/InviteController.php
+++ b/application/controllers/InviteController.php
@@ -446,7 +446,7 @@ class InviteController extends BaseController
 
         // ── fallback: JWT super_admin ────────────────────────────────────
         $this->requireAuth();
-        $this->requireRole(['super_admin']);
+        $this->requireSuperAdmin();
     }
 
     // ── helper ───────────────────────────────────────────────────────────
diff --git a/application/controllers/OnboardingController.php b/application/controllers/OnboardingController.php
index 25ca5a8..fb34873 100644
--- a/application/controllers/OnboardingController.php
+++ b/application/controllers/OnboardingController.php
@@ -7,6 +7,7 @@
 
 require_once __DIR__ . '/BaseController.php';
 require_once __DIR__ . '/../services/VisuraService.php';
+require_once APP_PATH . '/services/RateLimitService.php';
 
 class OnboardingController extends BaseController
 {