remove access checks from domain methods

tests/routes/portfolios/test_invitations.py

@@ -1,3 +1,4 @@
+import pytest
 import datetime
 from flask import url_for
 
@@ -94,6 +95,7 @@ def test_member_accepts_invalid_invite(client, user_session):
     assert response.status_code == 404
 
 
+@pytest.mark.auth
 def test_user_who_has_not_accepted_portfolio_invite_cannot_view(client, user_session):
     user = UserFactory.create()
     portfolio = PortfolioFactory.create()