Using capabilities instead of roles for access control.

attract/routes.py

@@ -5,7 +5,7 @@ from flask import Blueprint, render_template, redirect, url_for, request, jsonif
 import flask_login
 import werkzeug.exceptions as wz_exceptions
 
-from pillar.auth import current_web_user as current_user
+from pillar.auth import current_user as current_user
 from pillar.api.utils import str2id
 from pillar.web.utils import attach_project_pictures
 import pillar.web.subquery