From 87f1f6f8e6ee54e2aefd1b52ad51c55d776016cd Mon Sep 17 00:00:00 2001
From: Matthew Jones <matburt@redhat.com>
Date: Wed, 22 Jun 2016 13:47:00 -0400
Subject: [PATCH] Update inventory script visibility access level

admin roles on inv scripts can now see the actual script contents.  Read
role doesn't convey that capability.

This should be pretty similar to before from a read_role
perspective... it now allows more folks to see the script contents
---
 awx/api/serializers.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/awx/api/serializers.py b/awx/api/serializers.py
index 86167debba..a172f1d4e9 100644
--- a/awx/api/serializers.py
+++ b/awx/api/serializers.py
@@ -1279,7 +1279,7 @@ class CustomInventoryScriptSerializer(BaseSerializer):
         if obj is None:
             return ret
         request = self.context.get('request', None)
-        if request is not None and request.user is not None and not request.user.is_superuser:
+        if not request.user in obj.admin_role:
             ret['script'] = None
         return ret