From 5ccd955a66b90c47c49b5361309615e76606cd18 Mon Sep 17 00:00:00 2001 From: zhi Date: Sun, 22 Mar 2026 11:17:51 +0000 Subject: [PATCH] Fix: use role name 'admin' instead of 'superadmin' for global admin check --- app/api/rbac.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/api/rbac.py b/app/api/rbac.py index 25c066f..39127a7 100644 --- a/app/api/rbac.py +++ b/app/api/rbac.py @@ -20,8 +20,8 @@ def get_user_role(db: Session, user_id: int, project_id: int) -> Role | None: # Check global admin user = db.query(models.User).filter(models.User.id == user_id).first() if user and user.is_admin: - # Return global admin role - return db.query(Role).filter(Role.is_global == True, Role.name == "superadmin").first() + # Return global admin role (name="admin") + return db.query(Role).filter(Role.is_global == True, Role.name == "admin").first() return None