[Bugfix] IsSuperUserOrAppUser deny app user (#2558)

6 years ago · 78e4e13fb9
1 changed files with 1 additions and 1 deletions
--- a/apps/common/permissions.py
+++ b/apps/common/permissions.py
@ -35,7 +35,7 @@ class IsSuperUser(IsValidUser):
 class IsSuperUserOrAppUser(IsSuperUser):
    def has_permission(self, request, view):
        return super(IsSuperUserOrAppUser, self).has_permission(request, view) \
-            and (request.user.is_superuser or request.user.is_app)
+            or request.user.is_app


 class IsOrgAdmin(IsValidUser):