Allow admin users to do everything.

This makes things more consistent (previously admins could create projects,
but not nodes in those projects).
This commit is contained in:
2016-10-26 10:53:47 +02:00
parent a38e053c1a
commit 28223159e7
2 changed files with 4 additions and 10 deletions

View File

@@ -28,6 +28,10 @@ def check_permissions(collection_name, resource, method, append_allowed_methods=
:type check_node_type: str
"""
# Admins can do anything.
if user_has_role(u'admin'):
return
if not has_permissions(collection_name, resource, method, append_allowed_methods,
check_node_type):
abort(403)