From 78d01b3e1b6c2b5beb229b913ce7d5fdd38fc389 Mon Sep 17 00:00:00 2001 From: Ivlev Denis Date: Wed, 23 May 2018 11:54:53 +0300 Subject: [PATCH] Fix lessons perms --- api/v1/permissions.py | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/api/v1/permissions.py b/api/v1/permissions.py index 73e7674f..95a136ee 100644 --- a/api/v1/permissions.py +++ b/api/v1/permissions.py @@ -15,9 +15,9 @@ class IsAdmin(BasePermission): class IsTeacherOrAdmin(BasePermission): def has_permission(self, request, view): return request.user.is_authenticated and ( - request.user.role in [ - User.TEACHER_ROLE, User.ADMIN_ROLE - ] or request.user.is_staff or request.user.is_superuser + request.user.role > User.TEACHER_ROLE or + request.user.is_staff or + request.user.is_superuser ) @@ -31,9 +31,9 @@ class IsAdminOrIsSelf(BasePermission): class IsAuthorOrAdmin(BasePermission): def has_permission(self, request, view): return request.user.is_authenticated and ( - request.user.role in [ - User.AUTHOR_ROLE, User.ADMIN_ROLE - ] or request.user.is_staff or request.user.is_superuser + request.user.role >= User.AUTHOR_ROLE or + request.user.is_staff or + request.user.is_superuser )