diff --git a/awx/main/access.py b/awx/main/access.py index 29778b05d6..95ec0f20a8 100644 --- a/awx/main/access.py +++ b/awx/main/access.py @@ -2430,9 +2430,7 @@ class ScheduleAccess(BaseAccess): if not JobLaunchConfigAccess(self.user).can_add(data): return False if not data: - return UnifiedJobTemplate.accessible_pk_qs( - self.user, 'execute_role' - ).exists() + return Role.objects.filter(role_field__in=['update_role', 'execute_role'], ancestors__in=self.user.roles.all()).exists() return self.check_related('unified_job_template', UnifiedJobTemplate, data, role_field='execute_role', mandatory=True)