From: Tony Mack <tmack@cs.princeton.edu>
Date: Tue, 2 Jun 2009 20:45:06 +0000 (+0000)
Subject: determine_user_rights needs to give auth credentials the auth right
X-Git-Tag: sfa-0.9-0@14641~347
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=6073203ecb27ea51b8427bf20f195c81815a182f;p=sfa.git

determine_user_rights needs to give auth credentials the auth right
---

diff --git a/geni/util/auth.py b/geni/util/auth.py
index 9f98963b..02041225 100644
--- a/geni/util/auth.py
+++ b/geni/util/auth.py
@@ -179,12 +179,11 @@ class Auth:
         elif type == "authority":
             pis = record.get_geni_info().get("pi", [])
             operators = record.get_geni_info().get("operator", [])
+            rl.add("authority")
             if (cred_object_hrn in pis):
                 rl.add("sa")
             if (cred_object_hrn in operators):
                 rl.add("ma")
-            if (cred_object_hrn in pis) or (cred_object_hrn in operators):
-                rl.add("authority")
 
         elif type == "user":
             rl.add("refresh")