AC-362. Added change permission for user who created a credential.

This commit is contained in:
Chris Church 2013-09-05 11:42:20 -04:00
parent 0c28f202de
commit 60c44bead4

View File

@ -483,9 +483,11 @@ class CredentialAccess(BaseAccess):
raise PermissionDenied('Unable to change team on a credential')
if self.user.is_superuser:
return True
if self.user == obj.user:
if self.user == obj.created_by:
return True
if obj.user:
if self.user == obj.user:
return True
if obj.user.organizations.filter(admins__in=[self.user]).count():
return True
if obj.user.admin_of_organizations.filter(admins__in=[self.user]).count():