From 838d85a2b7f7908aea185c90e4a6fbd1ab6812bd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sybren=20A=2E=20St=C3=BCvel?= <sybren@stuvel.eu>
Date: Tue, 22 Aug 2017 16:40:05 +0200
Subject: [PATCH] Use capabilities system to check whether the user is a
 subscriber.

---
 cloud/__init__.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/cloud/__init__.py b/cloud/__init__.py
index b62ea03..db7b79d 100644
--- a/cloud/__init__.py
+++ b/cloud/__init__.py
@@ -7,7 +7,7 @@ from pillar.api.utils import authorization
 from pillar.extension import PillarExtension
 
 EXTENSION_NAME = 'cloud'
-ROLES_TO_BE_SUBSCRIBER = {'demo', 'subscriber', 'admin'}
+ROLES_TO_BE_SUBSCRIBER = {'demo', 'subscriber', 'admin'}  # TODO: get rid of this, use 'subscriber' cap
 
 
 class CloudExtension(PillarExtension):
@@ -72,7 +72,7 @@ class CloudExtension(PillarExtension):
 
     def context_processor(self):
         return {
-            'current_user_is_subscriber': authorization.user_matches_roles(ROLES_TO_BE_SUBSCRIBER)
+            'current_user_is_subscriber': authorization.user_has_cap('subscriber')
         }
 
     def setup_app(self, app):