Make cancellation policy read endpoint public

src/main/kotlin/com/android/trisolarisserver/controller/property/CancellationPolicies.kt

@@ -35,7 +35,6 @@ class CancellationPolicies(
         @PathVariable propertyId: UUID,
         @AuthenticationPrincipal principal: MyPrincipal?
     ): CancellationPolicyResponse {
-        requireRole(propertyAccess, propertyId, principal, Role.ADMIN, Role.MANAGER, Role.FINANCE)
         val policy = policyRepo.findByPropertyId(propertyId)
         return if (policy != null) {
             CancellationPolicyResponse(

src/main/kotlin/com/android/trisolarisserver/security/PublicEndpoints.kt

@@ -13,6 +13,7 @@ internal object PublicEndpoints {
     private val razorpayWebhook = Regex("^/properties/[^/]+/razorpay/webhook$")
     private val razorpayReturn = Regex("^/properties/[^/]+/razorpay/return/(success|failure)$")
     private val guestDocumentFile = Regex("^/properties/[^/]+/guests/[^/]+/documents/[^/]+/file$")
+    private val cancellationPolicy = Regex("^/properties/[^/]+/cancellation-policy$")
 
     fun isPublic(request: HttpServletRequest): Boolean {
         val path = request.requestURI
@@ -32,5 +33,6 @@ internal object PublicEndpoints {
             || path == "/icons/png"
             || iconPngFile.matches(path)
             || guestDocumentFile.matches(path)
+            || (cancellationPolicy.matches(path) && method == "GET")
     }
 }