always allow access to appadmin/manage.auth if used is admin

2015-06-28 16:40:23 -05:00
parent 044b2331c3
commit 26d87967c5
1 changed files with 2 additions and 1 deletions
@@ -49,7 +49,8 @@ if request.function == 'manage':
                                      auth.table_group(),
                                      auth.table_permission()])
    manager_role = manager_action.get('role', None) if manager_action else None
-    auth.requires_membership(manager_role)(lambda: None)()
+    if not (gluon.fileutils.check_credentials(request) or auth.has_membership(manager_role)):
+        raise HTTP(403, "Not authorized")
    menu = False
 elif (request.application == 'admin' and not session.authorized) or \
        (request.application != 'admin' and not gluon.fileutils.check_credentials(request)):