server/AyaNova/Controllers/AuthController.cs

@@ -347,15 +347,11 @@ namespace AyaNova.Api.Controllers
             log.LogInformation($"User \"{u.Name}\" logged in from \"{HttpContext.Connection.RemoteIpAddress.ToString()}\" ok");
 
 
-            //return appropriate data
-            
+            //return appropriate data for user type...
             if (u.UserType == UserType.Customer | u.UserType == UserType.HeadOffice)
-            {   
-               //customer type has special rights restrictions for UI features so return them here so client UI can enable or disable
-           
-            
-           
-            return Ok(ApiOkResponse.Response(new
+            {
+                //customer type has special rights restrictions for UI features so return them here so client UI can enable or disable
+                return Ok(ApiOkResponse.Response(new
                 {
                     token = token,
                     name = u.Name,
@@ -363,10 +359,8 @@ namespace AyaNova.Api.Controllers
                     roles = ((int)u.Roles).ToString(),
                     dlt = DownloadToken,
                     tfa = u.TwoFactorEnabled,
-                    CustomerAllowCSR = AyaNova.Util.ServerGlobalBizSettings.Cache.CustomerDefaultWorkOrderReportId,
-
+                    CustomerRights = UserBiz.CustomerUserEffectiveRights(u.Id)
                 }));
-
             }
             else
             {