diff --git a/src/documents/permissions.py b/src/documents/permissions.py index bdd6fd555..d16d7aa1c 100644 --- a/src/documents/permissions.py +++ b/src/documents/permissions.py @@ -40,7 +40,7 @@ class PaperlessObjectPermissions(DjangoObjectPermissions): class PaperlessAdminPermissions(BasePermission): def has_permission(self, request, view): - return request.user.has_perm("admin.view_logentry") + return request.user.is_staff def get_groups_with_only_permission(obj, codename): diff --git a/src/documents/tests/test_api_permissions.py b/src/documents/tests/test_api_permissions.py index 92e47a1ed..d7131b834 100644 --- a/src/documents/tests/test_api_permissions.py +++ b/src/documents/tests/test_api_permissions.py @@ -131,6 +131,7 @@ class TestApiAuth(DirectoriesMixin, APITestCase): def test_api_sufficient_permissions(self): user = User.objects.create_user(username="test") user.user_permissions.add(*Permission.objects.all()) + user.is_staff = True self.client.force_authenticate(user) Document.objects.create(title="Test")