Skip to content

Studio Administration interface does not properly grant admin privileges #3348

@rtibbles

Description

@rtibbles

Observed behavior

Toggling a user as admin in the Administration interface of Studio set the is_admin property to true. However, the Django REST framework IsAdminUser permissions class checks against the is_staff property, which is not set.

Expected behavior

Either we should use a permissions class that checks for is_admin or we should also be setting is_staff when we toggle admin permissions.

User-facing consequences

Newly updated Studio admins face considerable consternation and concern.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions