coder
diff --git a/‎coderd/apidoc/docs.go
Lines changed: 2 additions & 2 deletions b/‎coderd/apidoc/docs.go
Lines changed: 2 additions & 2 deletions
diff --git a/‎coderd/apidoc/swagger.json
Lines changed: 2 additions & 2 deletions b/‎coderd/apidoc/swagger.json
Lines changed: 2 additions & 2 deletions
diff --git a/‎coderd/database/dbauthz/dbauthz.go
Lines changed: 5 additions & 1 deletion b/‎coderd/database/dbauthz/dbauthz.go
Lines changed: 5 additions & 1 deletion
diff --git a/‎coderd/users.go
Lines changed: 3 additions & 3 deletions b/‎coderd/users.go
Lines changed: 3 additions & 3 deletions
diff --git a/‎docs/reference/api/users.md
Lines changed: 37 additions & 0 deletions b/‎docs/reference/api/users.md
Lines changed: 37 additions & 0 deletions
@@ -2425,7 +2425,11 @@ func (q *querier) GetUserActivityInsights(ctx context.Context, arg database.GetU
 }
 
 func (q *querier) GetUserAppearanceSettings(ctx context.Context, userID uuid.UUID) (string, error) {
-	if err := q.authorizeContext(ctx, policy.ActionReadPersonal, rbac.ResourceUser); err != nil {
+	u, err := q.db.GetUserByID(ctx, userID)
+	if err != nil {
+		return "", err
+	}
+	if err := q.authorizeContext(ctx, policy.ActionReadPersonal, u); err != nil {
 		return "", err
 	}
 	return q.db.GetUserAppearanceSettings(ctx, userID)
 
@@ -973,8 +973,8 @@ func (api *API) notifyUserStatusChanged(ctx context.Context, actingUserName stri
 	return nil
 }
 
-// @Summary Update user appearance settings
-// @ID update-user-appearance-settings
+// @Summary Get user appearance settings
+// @ID get-user-appearance-settings
 // @Security CoderSessionToken
 // @Accept json
 // @Produce json
@@ -1003,7 +1003,7 @@ func (api *API) userAppearanceSettings(rw http.ResponseWriter, r *http.Request)
 }
 
 // @Summary Update user appearance settings
-// @ID update-user-appearance-settings
+// @ID update-user-appearance-setting
 // @Security CoderSessionToken
 // @Accept json
 // @Produce json
Original file line number	Diff line number	Diff line change
`@@ -2425,7 +2425,11 @@ func (q *querier) GetUserActivityInsights(ctx context.Context, arg database.GetU`
`2425`	`2425`	`}`
`2426`	`2426`
`2427`	`2427`	`func (q *querier) GetUserAppearanceSettings(ctx context.Context, userID uuid.UUID) (string, error) {`
`2428`		`- if err := q.authorizeContext(ctx, policy.ActionReadPersonal, rbac.ResourceUser); err != nil {`
	`2428`	`+ u, err := q.db.GetUserByID(ctx, userID)`
	`2429`	`+ if err != nil {`
	`2430`	`+ return "", err`
	`2431`	`+ }`
	`2432`	`+ if err := q.authorizeContext(ctx, policy.ActionReadPersonal, u); err != nil {`
`2429`	`2433`	`return "", err`
`2430`	`2434`	`}`
`2431`	`2435`	`return q.db.GetUserAppearanceSettings(ctx, userID)`