From 2eccb8c45df09bddfbc1158cf88cdc2f037e31b7 Mon Sep 17 00:00:00 2001
From: "Paula.Quispe" <paula.quispe@processmaker.com>
Date: Mon, 27 Jun 2022 09:00:40 -0400
Subject: [PATCH] PMCORE-3874

---
 workflow/engine/src/ProcessMaker/Services/Api/Group.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/workflow/engine/src/ProcessMaker/Services/Api/Group.php b/workflow/engine/src/ProcessMaker/Services/Api/Group.php
index dfca536a4..3227ea8a8 100644
--- a/workflow/engine/src/ProcessMaker/Services/Api/Group.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Group.php
@@ -26,7 +26,7 @@ class Group extends Api
             $user = new User();
             $usrUid = $this->getUserId();
             // Review the permissions roles to access the API
-            if (!$user->checkPermission($usrUid, "PM_USERS") || !$user->checkPermission($usrUid, "PM_FACTORY")) {
+            if (!$user->checkPermission($usrUid, "PM_USERS") && !$user->checkPermission($usrUid, "PM_FACTORY")) {
                 throw new Exception(G::LoadTranslation("ID_USER_NOT_HAVE_PERMISSION", [$usrUid]));
             }
         } catch (Exception $e) {