diff --git a/apps/base/permissions.py b/apps/base/permissions.py index 1499b44..2a1bfc2 100644 --- a/apps/base/permissions.py +++ b/apps/base/permissions.py @@ -10,10 +10,10 @@ def has_permission(self, request, view): user_roles = request.user.roles for role in roles: - if user_roles.get(role, False) is False: - return False + if user_roles.get(role, False) is True: + return True else: continue - return True + return False return AuthorizationPermission