fix: check for permission not if superuser to update a schedule

program/views.py

@@ -927,7 +927,7 @@ class APIScheduleViewSet(viewsets.ModelViewSet):
         them including notes.
         """
 
-        if not request.user.is_superuser:
+        if not self.request.user.has_perm("program.change_schedule"):
             return Response(status=status.HTTP_401_UNAUTHORIZED)
 
         if request.method == "PATCH":