From 7d3bda949693926c2f5437e283078b9e061f9356 Mon Sep 17 00:00:00 2001 From: richard-dds Date: Fri, 30 Aug 2019 15:53:26 -0400 Subject: [PATCH] Update permission for download_link endpoint --- atst/routes/task_orders/new.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/atst/routes/task_orders/new.py b/atst/routes/task_orders/new.py index c94b0213..c284d3f1 100644 --- a/atst/routes/task_orders/new.py +++ b/atst/routes/task_orders/new.py @@ -85,7 +85,7 @@ def upload_token(portfolio_id): @task_orders_bp.route("/task_orders//download_link") -@user_can(Permissions.CREATE_TASK_ORDER, message="edit task order form") +@user_can(Permissions.VIEW_TASK_ORDER_DETAILS, message="view task order download link") def download_link(portfolio_id): filename = http_request.args.get("filename") object_name = http_request.args.get("objectName")