From fab6212113a6db26f9b416bf9bd42f19226fd82c Mon Sep 17 00:00:00 2001
From: John Cardinal <support@ayanova.com>
Date: Thu, 18 Nov 2021 20:58:17 +0000
Subject: [PATCH]

---
 server/AyaNova/Controllers/AttachmentController.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/AyaNova/Controllers/AttachmentController.cs b/server/AyaNova/Controllers/AttachmentController.cs
index aba83e11..6c74ca45 100644
--- a/server/AyaNova/Controllers/AttachmentController.cs
+++ b/server/AyaNova/Controllers/AttachmentController.cs
@@ -566,7 +566,7 @@ namespace AyaNova.Api.Controllers
             {
                 //check if allowed
                 var woTags = await ct.WorkOrder.AsNoTracking().Where(x => x.Id == dbObject.AttachToObjectId).Select(x => x.Tags).FirstOrDefaultAsync();
-                var custUserRights = await UserBiz.CustomerUserEffectiveRightsAsync(UserIdFromContext.Id(HttpContext.Items), woTags);
+                var custUserRights = await UserBiz.CustomerUserEffectiveRightsAsync(DownloadUser.Id, woTags);
                 if (!custUserRights.ThisWOCanAttachments)
                     return StatusCode(403, new ApiNotAuthorizedResponse());
             }