From 0aaa3807a9757b34c5624c9f203f87a890da24c9 Mon Sep 17 00:00:00 2001
From: Ryan Petrello <rpetrell@redhat.com>
Date: Tue, 31 Jul 2018 10:41:03 -0400
Subject: [PATCH] allow access to JT labels if you have read access to the JT

see: https://github.com/ansible/tower/issues/2180
---
 awx/main/access.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/awx/main/access.py b/awx/main/access.py
index e493ea075e..8842395ebe 100644
--- a/awx/main/access.py
+++ b/awx/main/access.py
@@ -2387,9 +2387,7 @@ class LabelAccess(BaseAccess):
     prefetch_related = ('modified_by', 'created_by', 'organization',)
 
     def filtered_queryset(self):
-        return self.model.objects.filter(
-            organization__in=Organization.accessible_pk_qs(self.user, 'read_role')
-        )
+        return self.model.objects.all()
 
     @check_superuser
     def can_read(self, obj):