From c36080e149fc5747aae0362cd888193bc738d647 Mon Sep 17 00:00:00 2001 From: Matthew Jones Date: Fri, 15 Jul 2016 13:48:23 -0400 Subject: [PATCH] Explicit super user check for JT can_delete --- awx/main/access.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/awx/main/access.py b/awx/main/access.py index f96f9baf26..d3f8e50990 100644 --- a/awx/main/access.py +++ b/awx/main/access.py @@ -1005,7 +1005,7 @@ class JobTemplateAccess(BaseAccess): return True def can_delete(self, obj): - is_delete_allowed = self.user in obj.admin_role + is_delete_allowed = self.user.is_superuser or self.user in obj.admin_role if not is_delete_allowed: return False active_jobs = [dict(type="job", id=o.id)