Only allow admins to modify system_user's multis.

This commit is contained in:
Max Goodman
2013-08-27 13:39:58 -07:00
parent d63d930182
commit 1d76adf7f7

View File

@@ -1351,7 +1351,7 @@ class LabeledMulti(tdb_cassandra.Thing, MultiReddit):
return user == self.owner or self.visibility == 'public'
def can_edit(self, user):
if c.user_is_admin:
if c.user_is_admin and self.owner == Account.system_user():
return True
return user == self.owner