diff --git a/server/AyaNova/biz/MemoBiz.cs b/server/AyaNova/biz/MemoBiz.cs index 3fd34eed..9c7f03f0 100644 --- a/server/AyaNova/biz/MemoBiz.cs +++ b/server/AyaNova/biz/MemoBiz.cs @@ -209,8 +209,9 @@ namespace AyaNova.Biz //skip validation if seeding if (ServerBootConfig.SEEDING) return; - //Only can send a memo from your own account or alternatively as the SuperUser account due to v7Import or other import tasks - if (proposedObj.FromId != UserId && proposedObj.FromId != 1) + //Only can send a memo from your own account + //with bypass for import if superuser + if (proposedObj.FromId != UserId && UserId != 1) { AddError(ApiErrorCode.NOT_AUTHORIZED, "FromId", "No impersonation"); return;//no need to bother with any other validation, this is not allowed