Merged in [7587] from rjsparks@nostrum.com:

    Anyone with a role in a group could preapprove drafts. Changed that to an explicit subset of roles. Fixes ticket 998.
 - Legacy-Id: 7609
Note: SVN reference [7587] has been migrated to Git commit 5ba0a27

Author: levkowetz

ietf/submit/views.py

@@ -406,7 +406,7 @@ def add_preapproval(request):
     groups = Group.objects.filter(type="wg").exclude(state="conclude").order_by("acronym").distinct()
 
     if not has_role(request.user, "Secretariat"):
-        groups = groups.filter(role__person__user=request.user)
+        groups = groups.filter(role__person__user=request.user,role__name__in=['ad','chair','delegate','secr'])
 
     if request.method == "POST":
         form = PreapprovalForm(request.POST)