From 442c79468159870d58157d8ae5ed2def4f1e7044 Mon Sep 17 00:00:00 2001
From: John Cardinal <support@ayanova.com>
Date: Fri, 3 Apr 2020 18:50:11 +0000
Subject: [PATCH]

---
 server/AyaNova/ControllerHelpers/Authorized.cs | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/server/AyaNova/ControllerHelpers/Authorized.cs b/server/AyaNova/ControllerHelpers/Authorized.cs
index a0b7a801..e497a804 100644
--- a/server/AyaNova/ControllerHelpers/Authorized.cs
+++ b/server/AyaNova/ControllerHelpers/Authorized.cs
@@ -94,13 +94,17 @@ namespace AyaNova.Api.ControllerHelpers
         internal static bool HasReadFullRole(AuthorizationRoles currentUserRoles, AyaType objectType)
         {
             //NOTE: this assumes that if you can change you can read
-            if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).Change))
-                return true;
+            var RoleSet = BizRoles.GetRoleSet(objectType);
+            var AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
+            return currentUserRoles.HasAnyFlags(AllowedRoles);
+            
+            // if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).Change))
+            //     return true;
 
-            if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).ReadFullRecord))
-                return true;
+            // if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).ReadFullRecord))
+            //     return true;
 
-            return false;
+            //return false;
         }