From 371d4708915959263c655fd2a92dbd6a5daa15f1 Mon Sep 17 00:00:00 2001
From: Stefano Maffei <stefano.maffei@outlook.com>
Date: Wed, 30 Apr 2025 08:31:01 +0200
Subject: [PATCH] [DURACOM-357] improved check for authorization on objects in
 ItemConverter

(cherry picked from commit a70dede20b9310ec85ec6f441be16c0437c796cf)
---
 .../main/java/org/dspace/app/rest/converter/ItemConverter.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dspace-server-webapp/src/main/java/org/dspace/app/rest/converter/ItemConverter.java b/dspace-server-webapp/src/main/java/org/dspace/app/rest/converter/ItemConverter.java
index 38f829be34..0c5a36d5fb 100644
--- a/dspace-server-webapp/src/main/java/org/dspace/app/rest/converter/ItemConverter.java
+++ b/dspace-server-webapp/src/main/java/org/dspace/app/rest/converter/ItemConverter.java
@@ -76,7 +76,7 @@ public class ItemConverter
         try {
             if (obj.isWithdrawn() && (Objects.isNull(context) ||
                                       Objects.isNull(context.getCurrentUser()) ||
-                !(authorizeService.isAdmin(context) || authorizeService.isCollectionAdmin(context)))) {
+                !(authorizeService.isAdmin(context) || authorizeService.isAdmin(context, obj)))) {
                 return new MetadataValueList(List.of());
             }
             if (context != null && (authorizeService.isAdmin(context) || itemService.canEdit(context, obj))) {