Check workspace permission, not ATAT permission

2018-11-29 10:35:11 -05:00
parent f546ccb673
commit 54aa10275f
5 changed files with 45 additions and 3 deletions
--- a/atst/domain/environments.py
+++ b/atst/domain/environments.py
@@ -88,7 +88,10 @@ class Environments(object):

    @classmethod
    def revoke_access(cls, user, environment, target_user):
-        Authorization.check_atat_permission(
-            user, Permissions.REMOVE_CSP_ROLES, "revoke environment access"
+        Authorization.check_workspace_permission(
+            user,
+            environment.workspace,
+            Permissions.REMOVE_CSP_ROLES,
+            "revoke environment access",
        )
        EnvironmentRoles.delete(environment.id, target_user.id)