Update route to include environment_id

atst/domain/authz/decorator.py

@@ -7,6 +7,7 @@ from atst.domain.portfolios import Portfolios
 from atst.domain.task_orders import TaskOrders
 from atst.domain.applications import Applications
 from atst.domain.invitations import Invitations
+from atst.domain.environments import Environments
 from atst.domain.exceptions import UnauthorizedError
 
 
@@ -31,6 +32,11 @@ def check_access(permission, message, override, *args, **kwargs):
             g.current_user, kwargs["portfolio_id"]
         )
 
+    elif "environment_id" in kwargs:
+        environment = Environments.get(kwargs["environment_id"])
+        access_args["application"] = environment.application
+        access_args["portfolio"] = environment.application.portfolio
+
     if override is not None and override(g.current_user, **access_args, **kwargs):
         return True