From 60c44bead445698ad2ef33c437655c6c14acbf2f Mon Sep 17 00:00:00 2001 From: Chris Church Date: Thu, 5 Sep 2013 11:42:20 -0400 Subject: [PATCH] AC-362. Added change permission for user who created a credential. --- awx/main/access.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/awx/main/access.py b/awx/main/access.py index 58b505dc9b..eebeb2e6a8 100644 --- a/awx/main/access.py +++ b/awx/main/access.py @@ -483,9 +483,11 @@ class CredentialAccess(BaseAccess): raise PermissionDenied('Unable to change team on a credential') if self.user.is_superuser: return True - if self.user == obj.user: + if self.user == obj.created_by: return True if obj.user: + if self.user == obj.user: + return True if obj.user.organizations.filter(admins__in=[self.user]).count(): return True if obj.user.admin_of_organizations.filter(admins__in=[self.user]).count():