2019-06-10 20:12:49 +00:00
parent 728b5abab6
commit 1e18f5a11d
4 changed files with 76 additions and 13 deletions
--- a/server/AyaNova/Controllers/UserController.cs
+++ b/server/AyaNova/Controllers/UserController.cs
@@ -327,7 +327,7 @@ namespace AyaNova.Api.Controllers
            //Instantiate the business object handler
            UserBiz biz = UserBiz.GetBiz(ct, HttpContext);

-            //If a user has change roles, or editOwnRoles then they can create, true is passed for isOwner since they are creating so by definition the owner
+            //If a user has change roles
            if (!Authorized.HasCreateRole(HttpContext.Items, biz.BizType))
            {
                return StatusCode(403, new ApiNotAuthorizedResponse());