From 075347e539671be2eaee0019b2f4048ec3be07b8 Mon Sep 17 00:00:00 2001 From: John Cardinal Date: Sat, 13 Feb 2021 01:10:02 +0000 Subject: [PATCH] --- server/AyaNova/biz/MemoBiz.cs | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/server/AyaNova/biz/MemoBiz.cs b/server/AyaNova/biz/MemoBiz.cs index 3fd34eed..9c7f03f0 100644 --- a/server/AyaNova/biz/MemoBiz.cs +++ b/server/AyaNova/biz/MemoBiz.cs @@ -209,8 +209,9 @@ namespace AyaNova.Biz //skip validation if seeding if (ServerBootConfig.SEEDING) return; - //Only can send a memo from your own account or alternatively as the SuperUser account due to v7Import or other import tasks - if (proposedObj.FromId != UserId && proposedObj.FromId != 1) + //Only can send a memo from your own account + //with bypass for import if superuser + if (proposedObj.FromId != UserId && UserId != 1) { AddError(ApiErrorCode.NOT_AUTHORIZED, "FromId", "No impersonation"); return;//no need to bother with any other validation, this is not allowed