only make a project admin if necessary (#5156)

DARPA-ASKEM · Oct 15, 2024 · 241d6ba · 241d6ba
1 parent 9404d98
commit 241d6ba
Showing 1 changed file with 2 additions and 6 deletions.
diff --git a/...rver/src/main/java/software/uncharted/terarium/hmiserver/utils/rebac/askem/RebacUser.java b/...rver/src/main/java/software/uncharted/terarium/hmiserver/utils/rebac/askem/RebacUser.java
@@ -74,18 +74,14 @@ public PermissionGroup createGroup(final String name) throws Exception, Relation
  }
 
  public String getPermissionFor(final RebacProject rebacProject) throws Exception {
- if (isAdmin()) {
- return Schema.Relationship.ADMIN.toString();
- }
-
  if (reBACService.isCreator(getSchemaObject(), rebacProject.getSchemaObject())) {
  return Schema.Relationship.CREATOR.toString();
- } else if (can(rebacProject, Schema.Permission.ADMINISTRATE)) {
- return Schema.Relationship.ADMIN.toString();
  } else if (can(rebacProject, Schema.Permission.WRITE)) {
  return Schema.Relationship.WRITER.toString();
  } else if (can(rebacProject, Schema.Permission.READ)) {
  return Schema.Relationship.READER.toString();
+ } else if (isAdmin() || can(rebacProject, Schema.Permission.ADMINISTRATE)) {
+ return Schema.Relationship.ADMIN.toString();
  }
  return "none";
  }