fix permissions and teacher attendance workflows

apps/server/src/notifications/notifications.controller.ts

@@ -13,6 +13,7 @@ import { Observable, map } from 'rxjs';
 import { NotificationsService } from './notifications.service';
 import { NotificationQueryDto } from './dto/notification.dto';
 import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
+import { RequirePermission } from '../auth/decorators/permission.decorator';
 
 interface AuthenticatedUser {
   id: number;
@@ -25,6 +26,7 @@ interface AuthenticatedRequest extends Request {
 }
 
 @UseGuards(JwtAuthGuard)
+@RequirePermission('notification:view')
 @Controller('notifications')
 export class NotificationsController {
   constructor(private readonly service: NotificationsService) {}