diff --git a/src/controllers/timeEntryController.js b/src/controllers/timeEntryController.js index 597a9f3eb..bb52dabff 100644 --- a/src/controllers/timeEntryController.js +++ b/src/controllers/timeEntryController.js @@ -254,7 +254,8 @@ const timeEntrycontroller = function (TimeEntry) { && timeEntry.totalSeconds !== newTotalSeconds && timeEntry.isTangible && isForAuthUser - && !(await hasPermission(req.body.requestor, 'editTimeEntry')) + && (await hasPermission(req.body.requestor, 'editTimeEntry')) + && (req.body.requestor.role !== 'Owner' && req.body.requestor.role !== 'Administrator') ) { const requestor = await UserProfile.findById( req.body.requestor.requestorId,