Add in authorization

2019-03-07 11:23:04 -05:00
parent 679ec187a5
commit 064c3ab05b
1 changed files with 1 additions and 3 deletions
--- a/atst/routes/portfolios/task_orders.py
+++ b/atst/routes/portfolios/task_orders.py
@@ -120,9 +120,7 @@ def resend_invite(portfolio_id, task_order_id, form=None):
    task_order = TaskOrders.get(g.current_user, task_order_id)
    portfolio = Portfolios.get(g.current_user, portfolio_id)

-    #
-    # TODO: Add in authorization check
-    #
+    Authorization.check_is_ko(g.current_user, task_order)

    officer = getattr(task_order, invite_type_info["role"])