Anyone with a role in a group could preapprove drafts. Changed that to an explicit subset of roles. Fixes ticket 998. Commit ready for merge.

 - Legacy-Id: 7587

Author: rjsparks

ietf/submit/views.py

@@ -403,7 +403,7 @@ def add_preapproval(request):
     groups = Group.objects.filter(type="wg").exclude(state="conclude").order_by("acronym").distinct()
 
     if not has_role(request.user, "Secretariat"):
-        groups = groups.filter(role__person__user=request.user)
+        groups = groups.filter(role__person__user=request.user,role__name__in=['ad','chair','delegate','secr'])
 
     if request.method == "POST":
         form = PreapprovalForm(request.POST)