diff --git a/Marco.Pms.Services/Service/ExpensesService.cs b/Marco.Pms.Services/Service/ExpensesService.cs index d5aa451..7d07bf2 100644 --- a/Marco.Pms.Services/Service/ExpensesService.cs +++ b/Marco.Pms.Services/Service/ExpensesService.cs @@ -1512,9 +1512,13 @@ namespace Marco.Pms.Services.Service bool hasPermission = await permissionService.HasPermissionAny(permissionIds, loggedInEmployee.Id); // Special case: allow review status if creator is the logged-in user - bool hasStatusPermission = Review == status.Id && loggedInEmployee.Id == paymentRequest.CreatedById; - if (!hasPermission || !hasStatusPermission) + if (Review == status.Id && loggedInEmployee.Id != paymentRequest.CreatedById) + { + continue; + } + + if (!hasPermission) { continue; }