From: Tony Mack <tmack@tux.cs.princeton.edu>
Date: Wed, 20 Aug 2014 15:15:17 +0000 (-0400)
Subject: pis can update slice objects
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=c195d72893dc98d0c897619c0c087a07a4917457;p=plstackapi.git

pis can update slice objects
---

diff --git a/planetstack/core/models/slice.py b/planetstack/core/models/slice.py
index e80128e..1e7df5a 100644
--- a/planetstack/core/models/slice.py
+++ b/planetstack/core/models/slice.py
@@ -2,6 +2,7 @@ import os
 from django.db import models
 from core.models import PlCoreBase
 from core.models import Site
+from core.models.site import SitePrivilege
 from core.models import User
 from core.models import Role
 from core.models import Deployment
@@ -51,10 +52,17 @@ class Slice(PlCoreBase):
             return False
         if user.is_admin:
             return True
+        # slice admins can update
         slice_privs = SlicePrivilege.objects.filter(user=user, slice=self)
         for slice_priv in slice_privs:
-            if slice_priv.role.role in ['admin', 'pi'] :
+            if slice_priv.role.role == 'admin':
                 return True
+        # site pis can update
+        site_privs = SitePrivilege.objects.filter(user=user, site=self.site)
+        for site_priv in site_privs:
+            if site_priv.role.role == 'pi':
+                return True
+ 
         return False
 
     @staticmethod