From 6953aff7a486eec76084d8a47f1eb685017e7f82 Mon Sep 17 00:00:00 2001
From: Raphael Michel <michel@pretix.eu>
Date: Fri, 9 Jan 2026 14:36:57 +0100
Subject: [PATCH] Update docs for device auth

---
 doc/api/deviceauth.rst | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/doc/api/deviceauth.rst b/doc/api/deviceauth.rst
index 494268a77b..65ccbc3572 100644
--- a/doc/api/deviceauth.rst
+++ b/doc/api/deviceauth.rst
@@ -197,10 +197,11 @@ Permissions & security profiles
 
 Device authentication is currently hardcoded to grant the following permissions:
 
-* View event meta data and products etc.
-* View orders
-* Change orders
-* Manage gift cards
+* Read event meta data and products etc.
+* Read and write orders
+* Read and write gift cards
+* Read and write reusable media
+* Read vouchers
 
 Devices cannot change events or products and cannot access vouchers.