Update permissions in view access decorator

harvard-lil · Nov 26, 2024 · 70566f8 · 70566f8
1 parent c0efe6c
commit 70566f8
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/perma_web/perma/views/user_management.py b/perma_web/perma/views/user_management.py
@@ -368,7 +368,9 @@ def manage_organization_user(request):
     return list_users_in_group(request, 'organization_user')
 
 
-@user_passes_test_or_403(lambda user: user.is_staff or user.is_registrar_user())
+@user_passes_test_or_403(
+    lambda user: user.is_staff or user.is_registrar_user() or user.is_organization_user
+)
 def manage_organization_user_export_user_list(request: HttpRequest):
     """Return a file listing users across organizations."""
     # Get query results via list_sponsored_users