From fb1f34f950d161104b0dac42b0b1f32c7e0ac486 Mon Sep 17 00:00:00 2001
From: "ashutosh.nehete" <ashutosh.nehete@marcoaiot.com>
Date: Wed, 6 Aug 2025 12:14:18 +0530
Subject: [PATCH] Added new condition for checking the permission for expense
 Action API

---
 Marco.Pms.Services/Service/ExpensesService.cs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Marco.Pms.Services/Service/ExpensesService.cs b/Marco.Pms.Services/Service/ExpensesService.cs
index cc3fbaa..cfcac91 100644
--- a/Marco.Pms.Services/Service/ExpensesService.cs
+++ b/Marco.Pms.Services/Service/ExpensesService.cs
@@ -674,7 +674,7 @@ namespace Marco.Pms.Services.Service
                 var permissionService = scope.ServiceProvider.GetRequiredService<PermissionServices>();
                 foreach (var permission in requiredPermissions)
                 {
-                    if (await permissionService.HasPermission(permission.PermissionId, loggedInEmployee.Id))
+                    if (await permissionService.HasPermission(permission.PermissionId, loggedInEmployee.Id) && model.StatusId != Review)
                     {
                         hasPermission = true;
                         break;
@@ -847,7 +847,7 @@ namespace Marco.Pms.Services.Service
             try
             {
                 await _context.SaveChangesAsync();
-                _logger.LogInfo("Successfully updated project {ProjectId} by user {UserId}.", id, loggedInEmployee.Id);
+                _logger.LogInfo("Successfully updated Expense {ExpenseId} by user {UserId}.", id, loggedInEmployee.Id);
             }
             catch (DbUpdateConcurrencyException ex)
             {