change permission, not admin permission

This commit is contained in:
Wayne Witzel III 2016-04-26 15:57:49 -04:00
parent 2b589228d3
commit e78eb591db

View File

@ -1225,7 +1225,7 @@ class CredentialList(ListCreateAPIView):
organization = Organization.objects.get(pk=request.data['organization'])
obj = organization
if not self.request.user.can_access(type(obj), 'admin', obj, request.data):
if not self.request.user.can_access(type(obj), 'change', obj, request.data):
raise PermissionDenied()
ret = super(CredentialList, self).post(request, *args, **kwargs)