diff --git a/circle/dashboard/views.py b/circle/dashboard/views.py index d066238..513ea5a 100644 --- a/circle/dashboard/views.py +++ b/circle/dashboard/views.py @@ -83,7 +83,8 @@ class AclUpdateView(View, SingleObjectMixin): def post(self, request, *args, **kwargs): instance = self.get_object() - if not instance.has_level(request.user, "owner"): + if not (instance.has_level(request.user, "owner") or + getattr(instance, 'owner', None) == request.user): logger.warning('Tried to set permissions of %s by non-owner %s.', unicode(instance), unicode(request.user)) raise PermissionDenied()