From 9e18d65ca673d8d1d2ad9eef5642b2ff85d93b88 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20Czern=C3=BD?= <pczerny@opennebula.systems>
Date: Tue, 25 Jun 2019 10:12:43 +0200
Subject: [PATCH] B #2563: Admin can always change other permissions (#3449)

(cherry picked from commit d56a0757a84a0efe3b30c268e101aaae60ee4f19)
---
 src/rm/RequestManagerChmod.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rm/RequestManagerChmod.cc b/src/rm/RequestManagerChmod.cc
index 806e245f53..f5d93ef6de 100644
--- a/src/rm/RequestManagerChmod.cc
+++ b/src/rm/RequestManagerChmod.cc
@@ -133,7 +133,7 @@ Request::ErrorCode RequestManagerChmod::chmod(
         Nebula::instance().get_configuration_attribute(
                 "ENABLE_OTHER_PERMISSIONS", enable_other);
 
-        if ( !enable_other )
+        if ( !enable_other && !att.is_admin())
         {
             att.resp_msg = "'other' permissions is disabled in oned.conf";
             return AUTHORIZATION;