admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2020-04-03 18:50:11 +00:00
parent ce6cc7d148
commit 442c794681
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
server/AyaNova/ControllerHelpers/Authorized.cs
View File

@@ -94,13 +94,17 @@ namespace AyaNova.Api.ControllerHelpers
internal static bool HasReadFullRole(AuthorizationRoles currentUserRoles, AyaType objectType) internal static bool HasReadFullRole(AuthorizationRoles currentUserRoles, AyaType objectType)
{ {
//NOTE: this assumes that if you can change you can read //NOTE: this assumes that if you can change you can read
if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).Change)) var RoleSet = BizRoles.GetRoleSet(objectType);
return true; var AllowedRoles = RoleSet.ReadFullRecord | RoleSet.Change;
return currentUserRoles.HasAnyFlags(AllowedRoles);
if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).ReadFullRecord)) // if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).Change))
return true; // return true;
return false; // if (currentUserRoles.HasAnyFlags(BizRoles.GetRoleSet(objectType).ReadFullRecord))
// return true;
//return false;
} }