From 5c1441486bd12631596ab969799fad652f5bf877 Mon Sep 17 00:00:00 2001 From: Pierre Jaury Date: Wed, 15 Jun 2016 21:07:47 +0200 Subject: [PATCH] Fix permissions for non-admin users --- admin/freeposte/admin/utils.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin/freeposte/admin/utils.py b/admin/freeposte/admin/utils.py index 259b2f94..65e0870e 100644 --- a/admin/freeposte/admin/utils.py +++ b/admin/freeposte/admin/utils.py @@ -27,7 +27,7 @@ def get_user(user_email, admin=False): if not user.domain in flask_login.current_user.get_managed_domains(): if admin: flask.abort(403) - elif not user == flask_login.current_user: + elif not user.email == flask_login.current_user.email: flask.abort(403) return user