From 7b2eae4b5c119d32e54340f3ab8ef36d50f988a8 Mon Sep 17 00:00:00 2001 From: Roberto Rosario Date: Wed, 28 Oct 2015 01:06:18 -0400 Subject: [PATCH] ACL access check now check the object for permission inheritance too. IE: page navigation links. --- mayan/apps/acls/managers.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/mayan/apps/acls/managers.py b/mayan/apps/acls/managers.py index b2a57bf70c..36fc2c6059 100644 --- a/mayan/apps/acls/managers.py +++ b/mayan/apps/acls/managers.py @@ -59,6 +59,13 @@ class AccessControlListManager(models.Manager): if related: obj = getattr(obj, related) + try: + parent_accessor = ModelPermission.get_inheritance(obj._meta.model) + except KeyError: + pass + else: + obj = getattr(obj, parent_accessor) + user_roles = [] for group in user.groups.all(): for role in group.roles.all():