diff --git a/server/AyaNova/Controllers/SearchController.cs b/server/AyaNova/Controllers/SearchController.cs index f9ef7972..8c8042f1 100644 --- a/server/AyaNova/Controllers/SearchController.cs +++ b/server/AyaNova/Controllers/SearchController.cs @@ -119,8 +119,8 @@ namespace AyaNova.Api.Controllers if (serverState.IsClosed) return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); - //since this is for opening an entire object it's appropriate to check if they have read full role first - if (!Authorized.HasReadFullRole(HttpContext.Items, ayaType)) + //since this is for opening an entire object it's appropriate to check if they have any role first + if (!Authorized.HasAnyRole(HttpContext.Items, ayaType)) return StatusCode(403, new ApiNotAuthorizedResponse()); if (!ModelState.IsValid)