From b6efb389042a3d578ff979a80f6a0c7e7565a5c3 Mon Sep 17 00:00:00 2001
From: John Cardinal <support@ayanova.com>
Date: Sat, 6 Jun 2020 22:40:25 +0000
Subject: [PATCH]

---
 docs/8.0/ayanova/docs/form-ops-backup.md       | 12 ++++++++++--
 server/AyaNova/Controllers/BackupController.cs |  4 ++--
 server/AyaNova/biz/BizRoles.cs                 |  2 +-
 3 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/docs/8.0/ayanova/docs/form-ops-backup.md b/docs/8.0/ayanova/docs/form-ops-backup.md
index b6c8e807..2526a463 100644
--- a/docs/8.0/ayanova/docs/form-ops-backup.md
+++ b/docs/8.0/ayanova/docs/form-ops-backup.md
@@ -1,3 +1,11 @@
-# OP-BACKUP Placeholder
+# OPS-BACKUP Placeholder
 
-This is a placeholder page for sections that are not written yet
+ROLES AND RIGHTS:
+    Modify automated backup settings
+    Trigger backup
+    DownloadBackup file
+        OpsFull
+    View Backup settings
+        OpsFull, opslimited
+    
+ 
diff --git a/server/AyaNova/Controllers/BackupController.cs b/server/AyaNova/Controllers/BackupController.cs
index 288e3f95..bf352862 100644
--- a/server/AyaNova/Controllers/BackupController.cs
+++ b/server/AyaNova/Controllers/BackupController.cs
@@ -61,7 +61,7 @@ namespace AyaNova.Api.Controllers
         {
             if (serverState.IsClosed)
                 return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason));
-            if (!Authorized.HasAnyRole(HttpContext.Items, AuthorizationRoles.OpsAdminFull | AuthorizationRoles.OpsAdminLimited))
+            if (!Authorized.HasAnyRole(HttpContext.Items, AuthorizationRoles.OpsAdminFull))
                 return StatusCode(403, new ApiNotAuthorizedResponse());
             var JobName = $"Backup (on demand)";
             OpsJob j = new OpsJob();
@@ -122,7 +122,7 @@ namespace AyaNova.Api.Controllers
                 return StatusCode(401, new ApiErrorResponse(ApiErrorCode.AUTHENTICATION_FAILED));
             }
 
-            if (!Authorized.HasAnyRole(DownloadUser.Roles, AuthorizationRoles.OpsAdminFull | AuthorizationRoles.OpsAdminLimited))
+            if (!Authorized.HasAnyRole(DownloadUser.Roles, AuthorizationRoles.OpsAdminFull))
             {
                 await Task.Delay(nFailedAuthDelay);//DOS protection
                 return StatusCode(403, new ApiNotAuthorizedResponse());
diff --git a/server/AyaNova/biz/BizRoles.cs b/server/AyaNova/biz/BizRoles.cs
index 47129988..6e7392ab 100644
--- a/server/AyaNova/biz/BizRoles.cs
+++ b/server/AyaNova/biz/BizRoles.cs
@@ -341,7 +341,7 @@ namespace AyaNova.Biz
 
             ////////////////////////////////////////////////////////////
             //GLOBAL OPS SETTINGS
-            //
+            // (control the backup)
             roles.Add(AyaType.GlobalOps, new BizRoleSet()
             {
                 Change = AuthorizationRoles.OpsAdminFull,