fixing credential access

This commit is contained in:
Wayne Witzel III 2016-04-15 15:31:31 -04:00
parent 6229e978e9
commit c3923da37a

View File

@ -558,7 +558,7 @@ class CredentialAccess(BaseAccess):
def can_change(self, obj, data):
if self.user.is_superuser:
return True
return self.user in obj.admin_role
return self.user in obj.owner_role
def can_delete(self, obj):
# Unassociated credentials may be marked deleted by anyone, though we