Raise Unauthorized error in authz instead of route

2019-02-01 14:51:40 -05:00
parent 49ed059853
commit 377149c766
3 changed files with 13 additions and 14 deletions
--- a/atst/domain/authz.py
+++ b/atst/domain/authz.py
@@ -37,8 +37,10 @@ class Authorization(object):
        return user.atat_role.name == "ccpo"

    @classmethod
-    def is_ko(cls, user, task_order):
-        return task_order.contracting_officer == user
+    def check_is_ko(cls, user, task_order):
+        if task_order.contracting_officer != user:
+            message = "review Task Order {}".format(task_order.id)
+            raise UnauthorizedError(user, message)

    @classmethod
    def check_task_order_permission(cls, user, task_order, permission, message):