Observed behavior
Toggling a user as admin in the Administration interface of Studio set the is_admin property to true. However, the Django REST framework IsAdminUser permissions class checks against the is_staff property, which is not set.
Expected behavior
Either we should use a permissions class that checks for is_admin or we should also be setting is_staff when we toggle admin permissions.
User-facing consequences
Newly updated Studio admins face considerable consternation and concern.
Observed behavior
Toggling a user as admin in the Administration interface of Studio set the
is_adminproperty totrue. However, the Django REST frameworkIsAdminUserpermissions class checks against theis_staffproperty, which is not set.Expected behavior
Either we should use a permissions class that checks for
is_adminor we should also be settingis_staffwhen we toggle admin permissions.User-facing consequences
Newly updated Studio admins face considerable consternation and concern.