[ENG-8516] osf admin can update contributor permission for any resource (#11407)

Author: ihorsokhanexoft

admin/nodes/views.py

@@ -299,7 +299,8 @@ def post(self, request, *args, **kwargs):
                 permission,
                 resource.get_visible(user),
                 request,
-                save=True
+                save=True,
+                skip_permission=True
             )
 
         return redirect(self.get_success_url())

osf/models/mixins.py

@@ -1644,7 +1644,7 @@ def copy_unclaimed_records(self, resource):
                 contributor.save()
 
     # TODO: optimize me
-    def update_contributor(self, user, permission, visible, auth, save=False):
+    def update_contributor(self, user, permission, visible, auth, save=False, skip_permission=False):
         """ TODO: this method should be updated as a replacement for the main loop of
         Node#manage_contributors. Right now there are redundancies, but to avoid major
         feature creep this will not be included as this time.
@@ -1653,7 +1653,7 @@ def update_contributor(self, user, permission, visible, auth, save=False):
         """
         OSFUser = apps.get_model('osf.OSFUser')
 
-        if not self.has_permission(auth.user, ADMIN):
+        if not skip_permission and not self.has_permission(auth.user, ADMIN):
             raise PermissionsError('Only admins can modify contributor permissions')
 
         if permission: