Implement Environments.revoke_access

atst/domain/environments.py

@@ -88,4 +88,7 @@ class Environments(object):
 
     @classmethod
     def revoke_access(cls, user, environment, target_user):
-        pass
+        Authorization.check_atat_permission(
+            user, Permissions.REMOVE_CSP_ROLES, "revoke environment access"
+        )
+        EnvironmentRoles.delete(environment.id, target_user.id)

atst/domain/workspaces/workspaces.py

@@ -164,7 +164,6 @@ class Workspaces(object):
 
         workspace_role.status = WorkspaceRoleStatus.DISABLED
         for environment in workspace.all_environments:
-            # TODO: Implement Environments.revoke_access
             Environments.revoke_access(user, environment, workspace_role.user)
         WorkspacesQuery.add_and_commit(workspace_role)