Merge pull request #4615 from AlanCoding/cancel_403

Remove can_cancel check (unrelated to permissions) from access method
This commit is contained in:
Alan Rominger 2017-01-13 15:24:03 -05:00 committed by GitHub
commit 6e0752c6de

View File

@ -985,8 +985,6 @@ class ProjectUpdateAccess(BaseAccess):
@check_superuser
def can_cancel(self, obj):
if not obj.can_cancel:
return False
if self.user == obj.created_by:
return True
# Project updates cascade delete with project, admin role descends from org admin