From 8c1d5319dde077780b2a1edab2156b675cebb54b Mon Sep 17 00:00:00 2001
From: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>
Date: Sun, 1 Nov 2015 02:47:24 -0400
Subject: [PATCH] Test an object's parent for permission but also test the
 child object if the parent test fails.

---
 mayan/apps/acls/managers.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/mayan/apps/acls/managers.py b/mayan/apps/acls/managers.py
index 36fc2c6059..e4b3acadd1 100644
--- a/mayan/apps/acls/managers.py
+++ b/mayan/apps/acls/managers.py
@@ -64,7 +64,12 @@ class AccessControlListManager(models.Manager):
         except KeyError:
             pass
         else:
-            obj = getattr(obj, parent_accessor)
+            try:
+                return self.check_access(
+                    permissions, user, getattr(obj, parent_accessor)
+                )
+            except PermissionDenied:
+                pass
 
         user_roles = []
         for group in user.groups.all():