Commit af07a668 authored by Mickaël Desfrênes's avatar Mickaël Desfrênes
Browse files

do not give special project access to superuser

parent f0d07a92

src/jama/__init__.py

+1 −1
Original line number Diff line number Diff line 
__version__ = "0.6.10"
 
__version__ = "0.6.11"

src/resources/acl.py

+2 −2
Original line number Diff line number Diff line
@@ -261,8 +261,8 @@ class UserAccess: 
        )



    def can_read(self, object_or_class) -> bool:

        if self.user.is_superuser and self.user.is_active:  # superuser gets a pass

            return True

        # if self.user.is_superuser and self.user.is_active:  # superuser gets a pass

        #    return True

        return (

            has_crud_access(self.permissions, object_or_class, CRUD_READ)

            and self.user.is_active