Add route for applications.revoke_invite

tests/factories.py

@@ -259,6 +259,7 @@ class ApplicationInvitationFactory(Base):
     email = factory.Faker("email")
     status = InvitationStatus.PENDING
     expiration_time = PortfolioInvitations.current_expiration_time()
+    role = factory.SubFactory(ApplicationRoleFactory)
 
 
 class AttachmentFactory(Base):

tests/routes/applications/test_settings.py

@@ -14,6 +14,7 @@ from atst.domain.common import Paginator
 from atst.domain.permission_sets import PermissionSets
 from atst.domain.portfolios import Portfolios
 from atst.domain.exceptions import NotFoundError
+from atst.models.application_role import Status as ApplicationRoleStatus
 from atst.models.environment_role import CSPRole
 from atst.models.permissions import Permissions
 from atst.models.portfolio_role import Status as PortfolioRoleStatus
@@ -540,3 +541,21 @@ def test_update_member(client, user_session):
     # check that the user has roles in the correct envs
     assert environment_roles[0].environment in [env, env_2]
     assert environment_roles[1].environment in [env, env_2]
+
+
+def test_revoke_invite(client, user_session):
+    invite = ApplicationInvitationFactory.create()
+    app_role = invite.role
+    application = app_role.application
+
+    user_session(application.portfolio.owner)
+    response = client.post(
+        url_for(
+            "applications.revoke_invite",
+            application_id=application.id,
+            application_role_id=app_role.id,
+        )
+    )
+
+    assert invite.is_revoked
+    assert app_role.status == ApplicationRoleStatus.DISABLED

tests/test_access.py

@@ -572,6 +572,24 @@ def test_applications_update_member(post_url_assert_status):
     post_url_assert_status(rando, url, 404)
 
 
+# applications.revoke_invite
+def test_applications_revoke_invite(post_url_assert_status):
+    ccpo = UserFactory.create_ccpo()
+    rando = UserFactory.create()
+    application = ApplicationFactory.create()
+
+    for user, status in [(ccpo, 302), (application.portfolio.owner, 302), (rando, 404)]:
+        app_role = ApplicationRoleFactory.create()
+        invite = ApplicationInvitationFactory.create(role=app_role)
+
+        url = url_for(
+            "applications.revoke_invite",
+            application_id=application.id,
+            application_role_id=app_role.id,
+        )
+        post_url_assert_status(user, url, status)
+
+
 # task_orders.download_task_order_pdf
 def test_task_orders_download_task_order_pdf_access(get_url_assert_status, monkeypatch):
     monkeypatch.setattr(