server/AyaNova/biz/BizRoles.cs

@@ -24,7 +24,8 @@ namespace AyaNova.Biz
             //HOW THIS WORKS / WHATS EXPECTED
             //Change = CREATE, RETRIEVE, UPDATE, DELETE - Full rights            
             //ReadFullRecord = You can read *all* the fields of the record, but can't modify it. Change is automatically checked for so only add different roles from change 
-            //MINI / PICKLIST NOTE: roles do not control getting a list of names for selection which is role independent because it's required for so much indirectly
+            //SELECT - this role allows user to select (fetch picklist) this type of object on other forms, we have this security level because otherwise a Customer role user for example, could see other customers via api if not prohibited
+            //  Setting SELECT - Select only needs to be set on objects for which there is a defined PickList object because that's where it's used solely (as of now anyway)
             //DELETE = There is no specific delete right for now though it's checked for by routes in Authorized.cs in case we want to add it in future as a separate right from create.
 
             #region All roles initialization
@@ -35,7 +36,8 @@ namespace AyaNova.Biz
             roles.Add(AyaType.User, new BizRoleSet()
             {
                 Change = AuthorizationRoles.BizAdminFull,
-                ReadFullRecord = AuthorizationRoles.BizAdminLimited
+                ReadFullRecord = AuthorizationRoles.BizAdminLimited,
+                Select = AuthorizationRoles.All
             });
 
             ////////////////////////////////////////////////////////////
@@ -56,7 +58,8 @@ namespace AyaNova.Biz
             roles.Add(AyaType.Widget, new BizRoleSet()
             {
                 Change = AuthorizationRoles.BizAdminFull | AuthorizationRoles.InventoryFull,
-                ReadFullRecord = AuthorizationRoles.BizAdminLimited | AuthorizationRoles.InventoryLimited
+                ReadFullRecord = AuthorizationRoles.BizAdminLimited | AuthorizationRoles.InventoryLimited,
+                Select = AuthorizationRoles.All
             });
 
             ////////////////////////////////////////////////////////////
@@ -155,13 +158,14 @@ namespace AyaNova.Biz
                 ReadFullRecord = AuthorizationRoles.All
             });
 
-             ////////////////////////////////////////////////////////////
+            ////////////////////////////////////////////////////////////
             //PICKLISTTEMPLATE
             //
             roles.Add(AyaType.PickListTemplate, new BizRoleSet()
             {
                 Change = AuthorizationRoles.BizAdminFull,
-                ReadFullRecord = AuthorizationRoles.All
+                ReadFullRecord = AuthorizationRoles.All,
+                Select = AuthorizationRoles.All
             });
 
             ////////////////////////////////////////////////////////////////////