Merge pull request #1700 from wwitzel3/issue-1429

Fixing CredentialList post access check

awx/api/views.py

@@ -1240,7 +1240,7 @@ class CredentialList(ListCreateAPIView):
             organization = Organization.objects.get(pk=request.data['organization'])
             obj = organization
 
-        if self.request.user not in obj.admin_role:
+        if not self.request.user.can_access(type(obj), 'change', obj, request.data):
             raise PermissionDenied()
 
         ret = super(CredentialList, self).post(request, *args, **kwargs)