diff --git a/helios/security.py b/helios/security.py index 0eb218cb7600db6b1f7f51aa12ffd8c9c23132ba..f946052164987082ede954ffe202f9db491e02e6 100644 --- a/helios/security.py +++ b/helios/security.py @@ -133,6 +133,11 @@ def user_can_see_election(request, election): if user_can_admin_election(user, election): return True + # or maybe this is a trustee of the election? + trustee = get_logged_in_trustee(request) + if trustee and trustee.election.uuid == election.uuid: + return True + # then this user has to be a voter return (get_voter(request, user, election) != None)