From a20803401f578f0c63365e817034fcbfe602d7d9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Emanuel=20Sch=C3=BCtze?= Date: Tue, 19 Mar 2019 21:26:28 +0100 Subject: [PATCH] Fixed permission check for manage comments --- openslides/motions/views.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/openslides/motions/views.py b/openslides/motions/views.py index feca5a5f8..95285c660 100644 --- a/openslides/motions/views.py +++ b/openslides/motions/views.py @@ -75,9 +75,9 @@ class MotionViewSet(ModelViewSet): result = has_perm(self.request.user, "motions.can_see") # For partial_update, update and destroy requests the rest of the check is # done in the update method. See below. - elif self.action in ("create", "set_state"): + elif self.action in ("create", "set_state", "manage_comments"): result = has_perm(self.request.user, "motions.can_see") - # For create the rest of the check is done in the respective method. See below. + # The rest of the check is done in the respective method. See below. elif self.action in ( "manage_multiple_state", "set_recommendation", @@ -90,7 +90,7 @@ class MotionViewSet(ModelViewSet): result = has_perm(self.request.user, "motions.can_see") and has_perm( self.request.user, "motions.can_manage_metadata" ) - elif self.action in ("sort", "manage_comments"): + elif self.action == "sort": result = has_perm(self.request.user, "motions.can_see") and has_perm( self.request.user, "motions.can_manage" )