Add corner case check to user can_admin.

This commit is contained in:
Aaron Tan 2016-10-13 16:48:39 -04:00
parent 7bd19b8e98
commit 189bdd6167

View File

@ -354,7 +354,8 @@ class UserAccess(BaseAccess):
@check_superuser
def can_admin(self, obj, data):
return Organization.objects.filter(member_role__members=obj, admin_role__members=self.user).exists()
return Organization.objects.filter(Q(member_role__members=obj) | Q(admin_role__members=obj),
Q(admin_role__members=self.user)).exists()
def can_delete(self, obj):
if obj == self.user: