2018-09-04 19:07:42 +00:00
parent 21eb952e5a
commit a5f9759a7c
15 changed files with 43 additions and 44 deletions
--- a/server/AyaNova/Controllers/AttachmentController.cs
+++ b/server/AyaNova/Controllers/AttachmentController.cs
@@ -369,7 +369,7 @@ namespace AyaNova.Api.Controllers
            }

            //is this allowed?
-            if (!Authorized.IsAuthorizedToRead(HttpContext.Items, dbObj.AttachToObjectType))
+            if (!Authorized.IsAuthorizedToReadFullRecord(HttpContext.Items, dbObj.AttachToObjectType))
            {
                return StatusCode(401, new ApiNotAuthorizedResponse());
            }