avniproject#727 | Use appropriate privilege check that works for rule…

…-server upload-user as well
shraddha761 · Jul 3, 2024 · 9a62d8c · 9a62d8c
1 parent 1cc4149
commit 9a62d8c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/avni-server-api/src/main/java/org/avni/server/web/ImportController.java b/avni-server-api/src/main/java/org/avni/server/web/ImportController.java
@@ -172,7 +172,7 @@ public JsonObject uploadMedia(@RequestParam("url") String url,
     public JsonObject getSubjectOrLocationObsValue(@RequestParam("type") String type,
                                                    @RequestParam("ids") String ids,
                                                    @RequestParam("formElementUuid") String formElementUuid) {
-        accessControlService.checkPrivilege(PrivilegeType.Analytics);
+        accessControlService.checkPrivilege(PrivilegeType.UploadMetadataAndData);
         FormElement formElement = formElementRepository.findByUuid(formElementUuid);
         JsonObject response = new JsonObject();
         if (ConceptDataType.Location.toString().equals(type)) {