push authz into the workspace domain for revoking tokens

2018-11-07 12:56:22 -05:00
parent 4849a89125
commit 50888f9e9f
2 changed files with 13 additions and 7 deletions
--- a/atst/domain/workspaces/workspaces.py
+++ b/atst/domain/workspaces/workspaces.py
@@ -50,6 +50,18 @@ class Workspaces(object):

        return workspace

+    @classmethod
+    def get_for_update_member(cls, user, workspace_id):
+        workspace = WorkspacesQuery.get(workspace_id)
+        Authorization.check_workspace_permission(
+            user,
+            workspace,
+            Permissions.ASSIGN_AND_UNASSIGN_ATAT_ROLE,
+            "update a workspace member",
+        )
+
+        return workspace
+
    @classmethod
    def get_by_request(cls, request):
        return WorkspacesQuery.get_by_request(request)