From 32ceefafd8f05256d7572c11a8d77d8ed21df258 Mon Sep 17 00:00:00 2001
From: John Cardinal <support@ayanova.com>
Date: Thu, 16 May 2019 22:58:53 +0000
Subject: [PATCH]

---
 server/AyaNova/Controllers/UserOptionsController.cs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/AyaNova/Controllers/UserOptionsController.cs b/server/AyaNova/Controllers/UserOptionsController.cs
index 46f8b66a..10285549 100644
--- a/server/AyaNova/Controllers/UserOptionsController.cs
+++ b/server/AyaNova/Controllers/UserOptionsController.cs
@@ -120,7 +120,7 @@ namespace AyaNova.Api.Controllers
                 return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
             }
 
-            if (id != UserId && !Authorized.HasModifyRole(HttpContext.Items, AyaType.UserOptions, o.OwnerId))
+            if (id != UserId && !Authorized.HasModifyRole(HttpContext.Items, AyaType.UserOptions))
             {
                 return StatusCode(403, new ApiNotAuthorizedResponse());
             }
@@ -189,7 +189,7 @@ namespace AyaNova.Api.Controllers
                 return NotFound(new ApiErrorResponse(ApiErrorCode.NOT_FOUND));
             }
 
-            if (id != UserId && !Authorized.HasModifyRole(HttpContext.Items, AyaType.UserOptions, o.OwnerId))
+            if (id != UserId && !Authorized.HasModifyRole(HttpContext.Items, AyaType.UserOptions))
             {
                 return StatusCode(403, new ApiNotAuthorizedResponse());
             }