Merge pull request #7 from wwitzel3/11th-hour

fixing credential access
This commit is contained in:
Akita Noek
2016-04-15 15:32:49 -04:00

View File

@@ -558,7 +558,7 @@ class CredentialAccess(BaseAccess):
def can_change(self, obj, data): def can_change(self, obj, data):
if self.user.is_superuser: if self.user.is_superuser:
return True return True
return self.user in obj.admin_role return self.user in obj.owner_role
def can_delete(self, obj): def can_delete(self, obj):
# Unassociated credentials may be marked deleted by anyone, though we # Unassociated credentials may be marked deleted by anyone, though we