X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=sfa%2Ftrust%2Fauth.py;h=57583e46b8ac16a2f8220d842cf856902aee5190;hb=ec74e6b27d2095b9ff8d5dd7b499fb58dadd127c;hp=f3609b3f7f41d8999774ebd74ec846b7a4dc6f78;hpb=c451060afdf4ef60cdfea767ba6f00d6ffce66f8;p=sfa.git

diff --git a/sfa/trust/auth.py b/sfa/trust/auth.py
index f3609b3f..57583e46 100644
--- a/sfa/trust/auth.py
+++ b/sfa/trust/auth.py
@@ -240,11 +240,10 @@ class Auth:
         elif type == "authority":
             pis = record.get("pi", [])
             operators = record.get("operator", [])
-            rl.add("authority,sa,ma")
             if (cred_object_hrn in pis):
-                rl.add("sa")
+                rl.add("authority,sa")
             if (cred_object_hrn in operators):
-                rl.add("ma")
+                rl.add("authority,ma")
 
         elif type == "user":
             rl.add("refresh")