From 1ce216684358ebb520fce7cddc7bec1931223711 Mon Sep 17 00:00:00 2001
From: eeintech <eeintech@eeinte.ch>
Date: Tue, 6 Oct 2020 09:59:51 -0500
Subject: [PATCH] Fixed context permissions for superuser with no group
 assigned

---
 InvenTree/InvenTree/context.py | 41 +++++++++++++++++++++-------------
 1 file changed, 26 insertions(+), 15 deletions(-)

diff --git a/InvenTree/InvenTree/context.py b/InvenTree/InvenTree/context.py
index f9d856f566..aa66402ed6 100644
--- a/InvenTree/InvenTree/context.py
+++ b/InvenTree/InvenTree/context.py
@@ -7,6 +7,8 @@ Provides extra global data to all templates.
 from InvenTree.status_codes import SalesOrderStatus, PurchaseOrderStatus
 from InvenTree.status_codes import BuildStatus, StockStatus
 
+from users.models import RuleSet
+
 
 def status_codes(request):
 
@@ -38,22 +40,31 @@ def user_roles(request):
     roles = {
     }
 
-    for group in user.groups.all():
-        for rule in group.rule_sets.all():
+    if user.is_superuser:
+        for ruleset in RuleSet.RULESET_MODELS.keys():
+            roles[ruleset] = {
+                'view': True,
+                'add': True,
+                'change': True,
+                'delete': True,
+            }
+    else:
+        for group in user.groups.all():
+            for rule in group.rule_sets.all():
 
-            # Ensure the role name is in the dict
-            if rule.name not in roles:
-                roles[rule.name] = {
-                    'view': user.is_superuser,
-                    'add': user.is_superuser,
-                    'change': user.is_superuser,
-                    'delete': user.is_superuser
-                }
+                # Ensure the role name is in the dict
+                if rule.name not in roles:
+                    roles[rule.name] = {
+                        'view': user.is_superuser,
+                        'add': user.is_superuser,
+                        'change': user.is_superuser,
+                        'delete': user.is_superuser
+                    }
 
-            # Roles are additive across groups
-            roles[rule.name]['view'] |= rule.can_view
-            roles[rule.name]['add'] |= rule.can_add
-            roles[rule.name]['change'] |= rule.can_change
-            roles[rule.name]['delete'] |= rule.can_delete
+                # Roles are additive across groups
+                roles[rule.name]['view'] |= rule.can_view
+                roles[rule.name]['add'] |= rule.can_add
+                roles[rule.name]['change'] |= rule.can_change
+                roles[rule.name]['delete'] |= rule.can_delete
 
     return {'roles': roles}