reports: Allow trusted users to accept their own reports

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/dbl/reports.py b/src/dbl/reports.py
index e716f8f321f5b7eeb7725e5220956216066f6abf..370f4379efa2dcd6af66c2f64229466d9aee4e01 100644 (file)
--- a/src/dbl/reports.py
+++ b/src/dbl/reports.py
@@ -342,8 +342,8 @@ class Report(sqlmodel.SQLModel, database.BackendMixin, table=True):
 
                # The owners have some permissions...
                if self.reported_by == user.uid:
-                       # Users cannot accept their own reports
-                       if accept:
+                       # Users cannot accept their own reports unless they are trusted
+                       if accept and not user.is_trusted():
                                return False
 
                        # Otherwise users can manage their own reports