Comment 4 for bug 511567

Curtis Hovey (sinzui) wrote :

The security checker was broken recently:
    return self.obj.person == user or user.in_admin
should be
    return self.obj.person == user.person or user.in_admin

The tests passed because the user salgado is an admin.