#727 | Use appropriate privilege check that works for rule-server upload-user as well

Author: himeshr

avni-server-api/src/main/java/org/avni/server/web/ImportController.java

@@ -156,7 +156,7 @@ public JsonObject uploadMedia(@RequestParam("url") String url,
     public JsonObject getSubjectOrLocationObsValue(@RequestParam("type") String type,
                                                    @RequestParam("ids") String ids,
                                                    @RequestParam("formElementUuid") String formElementUuid) {
-        accessControlService.checkPrivilege(PrivilegeType.Analytics);
+        accessControlService.checkPrivilege(PrivilegeType.UploadMetadataAndData);
         FormElement formElement = formElementRepository.findByUuid(formElementUuid);
         JsonObject response = new JsonObject();
         if (ConceptDataType.Location.toString().equals(type)) {