From 41e246d84abdc2043c87aef663cc289b8920779c Mon Sep 17 00:00:00 2001 From: John Cardinal Date: Thu, 10 Jun 2021 20:18:39 +0000 Subject: [PATCH] --- server/AyaNova/Controllers/SearchController.cs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/AyaNova/Controllers/SearchController.cs b/server/AyaNova/Controllers/SearchController.cs index f9ef7972..8c8042f1 100644 --- a/server/AyaNova/Controllers/SearchController.cs +++ b/server/AyaNova/Controllers/SearchController.cs @@ -119,8 +119,8 @@ namespace AyaNova.Api.Controllers if (serverState.IsClosed) return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); - //since this is for opening an entire object it's appropriate to check if they have read full role first - if (!Authorized.HasReadFullRole(HttpContext.Items, ayaType)) + //since this is for opening an entire object it's appropriate to check if they have any role first + if (!Authorized.HasAnyRole(HttpContext.Items, ayaType)) return StatusCode(403, new ApiNotAuthorizedResponse()); if (!ModelState.IsValid)