diff --git a/BMA.EHR.Discipline.Service/Controllers/DisciplineDirectorController.cs b/BMA.EHR.Discipline.Service/Controllers/DisciplineDirectorController.cs index 4ed6e0ce..4cbc8f5c 100644 --- a/BMA.EHR.Discipline.Service/Controllers/DisciplineDirectorController.cs +++ b/BMA.EHR.Discipline.Service/Controllers/DisciplineDirectorController.cs @@ -90,6 +90,7 @@ namespace BMA.EHR.DisciplineDirector.Service.Controllers { return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden); } + var _permiss = jsonData["result"]?.ToString(); // สิทธิ์มองเห็นรายชื่อ var userId = UserId == null ? Guid.Empty : Guid.Parse(UserId); var profile = await _userProfileRepository.GetUserOC(userId, token.Replace("Bearer ", "")); @@ -102,7 +103,7 @@ namespace BMA.EHR.DisciplineDirector.Service.Controllers x.Email.Contains(keyword) || x.Phone.Contains(keyword) || x.Qualification.Contains(keyword)) && - x.RootDnaId == profile.RootDnaId + (_permiss != "OWNER" && x.RootDnaId == profile.RootDnaId || _permiss == "OWNER" && true) select x).ToList(); var data = data_search .Select(x => new