diff --git a/pkg/service/submissions.go b/pkg/service/submissions.go index f8de940..3ec4516 100644 --- a/pkg/service/submissions.go +++ b/pkg/service/submissions.go @@ -584,9 +584,15 @@ func (svc *Service) ActionSubmissionTriggerSubmit(ctx context.Context, params ap return err } + has_submission_review, err := userInfo.HasRoleSubmissionReview() + if err != nil { + return err + } + // check if caller is the submitter - has_role := userId == submission.Submitter - if !has_role { + is_submitter := userId == submission.Submitter + // neither = deny + if !is_submitter && !has_submission_review { return ErrPermissionDeniedNotSubmitter }