check sitewide perms for portfolio access, restore ccpo tests

2019-03-19 06:06:02 -04:00
parent bec5d11bfe
commit 366ada5a90
3 changed files with 4 additions and 5 deletions
--- a/atst/domain/authz.py
+++ b/atst/domain/authz.py
@@ -24,7 +24,10 @@ class Authorization(object):

    @classmethod
    def check_portfolio_permission(cls, user, portfolio, permission, message):
-        if not Authorization.has_portfolio_permission(user, portfolio, permission):
+        if not (
+            Authorization.has_atat_permission(user, permission)
+            or Authorization.has_portfolio_permission(user, portfolio, permission)
+        ):
            raise UnauthorizedError(user, message)

    @classmethod