diff --git a/src/Api/Controllers/OrganizationUsersController.cs b/src/Api/Controllers/OrganizationUsersController.cs index efab3833a2..9a1cf63c9f 100644 --- a/src/Api/Controllers/OrganizationUsersController.cs +++ b/src/Api/Controllers/OrganizationUsersController.cs @@ -90,12 +90,12 @@ public class OrganizationUsersController : Controller [HttpGet("")] public async Task> Get(Guid orgId, bool includeGroups = false, bool includeCollections = false) { - var authorized = FlexibleCollectionsIsEnabled ? - (await _authorizationService.AuthorizeAsync(User, null, OrganizationUserOperations.Read(orgId))).Succeeded : - await _currentContext.ViewAllCollections(orgId) || - await _currentContext.ViewAssignedCollections(orgId) || - await _currentContext.ManageGroups(orgId) || - await _currentContext.ManageUsers(orgId); + var authorized = FlexibleCollectionsIsEnabled + ? (await _authorizationService.AuthorizeAsync(User, null, OrganizationUserOperations.ReadAll(orgId))).Succeeded + : await _currentContext.ViewAllCollections(orgId) || + await _currentContext.ViewAssignedCollections(orgId) || + await _currentContext.ManageGroups(orgId) || + await _currentContext.ManageUsers(orgId); if (!authorized) { throw new NotFoundException(); diff --git a/src/Api/Vault/AuthorizationHandlers/OrganizationUsers/OrganizationUserAuthorizationHandler.cs b/src/Api/Vault/AuthorizationHandlers/OrganizationUsers/OrganizationUserAuthorizationHandler.cs index 27614a062e..7ccee5aa58 100644 --- a/src/Api/Vault/AuthorizationHandlers/OrganizationUsers/OrganizationUserAuthorizationHandler.cs +++ b/src/Api/Vault/AuthorizationHandlers/OrganizationUsers/OrganizationUserAuthorizationHandler.cs @@ -51,13 +51,13 @@ public class OrganizationUserAuthorizationHandler : AuthorizationHandler