Take a look at the documentation for the check provided during creation of positions:
/contracts/farm-manager/src/position/commands.rs#L41-L56
The code comment, however, is misleading; considering whereas the documentation hint that only the pool manager can create positions, it actually checks that either the pool manager is the sender or the receiver of the position is the sender.
QA - wrong documentation.
Update the comment to accurately reflect the authorization logic:
