separate control structures for task_order_id and portfolio_id in decorator

2019-03-22 14:47:42 -04:00
parent 7d5e615e6a
commit 21af2b8ce9
1 changed files with 2 additions and 1 deletions
--- a/atst/domain/authz/decorator.py
+++ b/atst/domain/authz/decorator.py
@@ -15,7 +15,8 @@ def check_access(permission, message, exception, *args, **kwargs):
        access_args["portfolio"] = Portfolios.get(
            g.current_user, kwargs["portfolio_id"]
        )
-    elif "task_order_id" in kwargs:
+
+    if "task_order_id" in kwargs:
        task_order = TaskOrders.get(kwargs["task_order_id"])
        access_args["portfolio"] = task_order.portfolio