Merge pull request #346 from fasrc/cp_deptmanagerpermissions

give department approvers user permissions for child projects

coldfront/core/project/models.py

@@ -9,6 +9,7 @@
 from model_utils.models import TimeStampedModel
 from simple_history.models import HistoricalRecords
 
+from ifxuser.models import Organization
 from coldfront.core.field_of_science.models import FieldOfScience
 from coldfront.core.utils.common import import_from_settings
 
@@ -214,6 +215,17 @@ def user_permissions(self, user):
 
         if self.pi.id == user.id:
             permissions.append(ProjectPermission.PI)
+
+        # if the user is an approver in a department connected to the project,
+        # give them user permissions
+        departments = Organization.objects.filter(
+            org_tree='Research Computing Storage Billing'
+        )
+        proj_departments = [d for d in departments if self in d.get_projects()]
+        for department in proj_departments:
+            if user in department.useraffiliation_set.filter(role='approver'):
+                permissions.append(ProjectPermission.USER)
+
         return permissions
 
     def has_perm(self, user, perm):