Commit bbd9d336 authored by Pablo Panero's avatar Pablo Panero
Browse files

Bug Fix: First owner permission should not check default index just is_auth

parent 9688e35d
......@@ -86,6 +86,11 @@ class RecordPermission(object):
def has_owner_permission(user, record=None):
"""Check if user is authenticated and has create access"""
log_action(user, 'CREATE/OWNER')
# First authentication phase, decorator level
if not record:
return user.is_authenticated
# Second authentication phase, record level
if user.is_authenticated:
# Allow based in the '_access' key
user_provides = get_user_provides()
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment