From 189bdd616711bb38eb0a7cd12cae8c83c6bd2511 Mon Sep 17 00:00:00 2001 From: Aaron Tan Date: Thu, 13 Oct 2016 16:48:39 -0400 Subject: [PATCH] Add corner case check to user can_admin. --- awx/main/access.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/awx/main/access.py b/awx/main/access.py index 421e0e73ab..a0cd6c3e8d 100644 --- a/awx/main/access.py +++ b/awx/main/access.py @@ -354,7 +354,8 @@ class UserAccess(BaseAccess): @check_superuser def can_admin(self, obj, data): - return Organization.objects.filter(member_role__members=obj, admin_role__members=self.user).exists() + return Organization.objects.filter(Q(member_role__members=obj) | Q(admin_role__members=obj), + Q(admin_role__members=self.user)).exists() def can_delete(self, obj): if obj == self.user: