server/AyaNova/biz/BizRoles.cs

@@ -23,7 +23,7 @@ namespace AyaNova.Biz
             //CHANGE = CREATE, RETRIEVE, UPDATE, DELETE - Full rights
             //EDITOWN = special subset of CHANGE: You can create and if it's one you created then you have rights to edit it or delete, but you can't edit ones others have created
             //READ = You can read *all* the fields of the record, but can't modify it. Change is automatically checked for so only add different roles from change 
-                //PICKLIST NOTE: this does not control getting a list of names for selection which is role independent because it's required for so much indirectly
+            //PICKLIST NOTE: this does not control getting a list of names for selection which is role independent because it's required for so much indirectly
             //DELETE = There is no specific delete right for now though it's checked for by routes in Authorized.cs in case we want to add it in future as a separate right from create.
 
             #region All roles initialization
@@ -38,6 +38,19 @@ namespace AyaNova.Biz
                 ReadFullRecord = AuthorizationRoles.BizAdminLimited
             });
 
+            ////////////////////////////////////////////////////////////
+            //USEROPTIONS
+            //(Identical to User, though route also allows own record access full changes)
+            //            
+            roles.Add(AyaType.UserOptions, new BizRoleSet()
+            {
+                Change = AuthorizationRoles.BizAdminFull,
+                EditOwn = AuthorizationRoles.NoRole,//no one can make a user but a bizadminfull
+                ReadFullRecord = AuthorizationRoles.BizAdminLimited
+            });
+
+            
+
             ////////////////////////////////////////////////////////////
             //WIDGET
             //