Merge pull request #570 from dod-ccpo/bug-start-to-from-pf-funding-page

Allow CCPO to create TO on anyone's portfolio
2019-01-23 16:37:20 -05:00
parent 9f2419d334 ef85340baa
commit 88e4a99b03
2 changed files with 7 additions and 2 deletions
--- a/atst/domain/authz.py
+++ b/atst/domain/authz.py
@@ -6,7 +6,9 @@ from atst.domain.exceptions import UnauthorizedError
 class Authorization(object):
    @classmethod
    def has_portfolio_permission(cls, user, portfolio, permission):
-        return permission in PortfolioRoles.portfolio_role_permissions(portfolio, user)
+        return permission in PortfolioRoles.portfolio_role_permissions(
+            portfolio, user
+        ) or Authorization.is_ccpo(user)

    @classmethod
    def has_atat_permission(cls, user, permission):