pk/atst
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

separate control structures for task_order_id and portfolio_id in decorator

Browse Source
This commit is contained in:
dandds 2019-03-22 14:47:42 -04:00
parent 7d5e615e6a
commit 21af2b8ce9
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
atst/domain/authz/decorator.py
View File

@ -15,7 +15,8 @@ def check_access(permission, message, exception, *args, **kwargs):
access_args["portfolio"] = Portfolios.get( access_args["portfolio"] = Portfolios.get(
g.current_user, kwargs["portfolio_id"] g.current_user, kwargs["portfolio_id"]
) )
elif "task_order_id" in kwargs:
if "task_order_id" in kwargs:
task_order = TaskOrders.get(kwargs["task_order_id"]) task_order = TaskOrders.get(kwargs["task_order_id"])
access_args["portfolio"] = task_order.portfolio access_args["portfolio"] = task_order.portfolio