From 21400256d84796df3cf315066839cff9a5581831 Mon Sep 17 00:00:00 2001 From: John Cardinal Date: Mon, 4 May 2020 00:12:04 +0000 Subject: [PATCH] --- server/AyaNova/biz/WorkOrderBiz.cs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/AyaNova/biz/WorkOrderBiz.cs b/server/AyaNova/biz/WorkOrderBiz.cs index 7e71f273..eaea42b4 100644 --- a/server/AyaNova/biz/WorkOrderBiz.cs +++ b/server/AyaNova/biz/WorkOrderBiz.cs @@ -67,7 +67,7 @@ namespace AyaNova.Biz //Create and save to db a new workorder and return it //NOTE: Serial can be specified or edited after the fact in a limited way by full role specfic only!! (service manager, bizadminfull, accounting maybe) - if (serial != null && CurrentUserRoles.HasFlag(RolesAllowedToChangeSerial)) + if (serial != null && !Authorized.HasAnyRole(CurrentUserRoles, RolesAllowedToChangeSerial)) { AddError(ApiErrorCode.NOT_AUTHORIZED, "Serial"); return null; @@ -155,7 +155,7 @@ namespace AyaNova.Biz CopyObject.Copy(putObj, dbObj, "Id,Serial"); //if user has rights then change it, otherwise just ignore it and do the rest - if (SnapshotOfOriginalDBObj.Serial != putObj.Serial && CurrentUserRoles.HasFlag(RolesAllowedToChangeSerial)) + if (SnapshotOfOriginalDBObj.Serial != putObj.Serial && Authorized.HasAnyRole(CurrentUserRoles, RolesAllowedToChangeSerial)) { dbObj.Serial = putObj.Serial; }