X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/2e727c5d2d000faa6f1d9a566dc59568f1b276fe..3a6b1a17f1b073e381b053b52e3cb0bb9c81d249:/services/api/app/models/user.rb

diff --git a/services/api/app/models/user.rb b/services/api/app/models/user.rb
index 141bccef21..52d36ac577 100644
--- a/services/api/app/models/user.rb
+++ b/services/api/app/models/user.rb
@@ -112,7 +112,6 @@ class User < ArvadosModel
   end
 
   def can?(actions)
-    return true if is_admin
     actions.each do |action, target|
       unless target.nil?
         if target.respond_to? :uuid
@@ -136,7 +135,7 @@ class User < ArvadosModel
 
       user_uuids_subquery = USER_UUIDS_SUBQUERY_TEMPLATE % {user: "$1", perm_level: "$3"}
 
-      unless ActiveRecord::Base.connection.
+      if !is_admin && !ActiveRecord::Base.connection.
         exec_query(%{
 SELECT 1 FROM #{PERMISSION_VIEW}
   WHERE user_uuid in (#{user_uuids_subquery}) and