OP-2169: Non admin users with grievance access can get config

openimis · Oct 26, 2024 · e8bdb69 · e8bdb69
1 parent 1a0deb4
commit e8bdb69
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/grievance_social_protection/schema.py b/grievance_social_protection/schema.py
@@ -117,7 +117,7 @@ def resolve_grievance_config(self, info, **kwargs):
         user = info.context.user
         if type(user) is AnonymousUser:
             raise PermissionDenied(_("unauthorized"))
-        if not user.is_imis_admin:
+        if not info.context.user.has_perms(TicketConfig.gql_query_tickets_perms):
             raise PermissionDenied(_("unauthorized"))
         return GrievanceTypeConfigurationGQLType()