Merge pull request #24 from openimis/bugfix/OP-2169

OP-2169: Non admin users with grievance access can get config
openimis · Oct 28, 2024 · 1e7f9ba · 1e7f9ba
2 parents 1a0deb4 + e8bdb69
commit 1e7f9ba
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/grievance_social_protection/schema.py b/grievance_social_protection/schema.py
@@ -117,7 +117,7 @@ def resolve_grievance_config(self, info, **kwargs):
         user = info.context.user
         if type(user) is AnonymousUser:
             raise PermissionDenied(_("unauthorized"))
-        if not user.is_imis_admin:
+        if not info.context.user.has_perms(TicketConfig.gql_query_tickets_perms):
             raise PermissionDenied(_("unauthorized"))
         return GrievanceTypeConfigurationGQLType()