New invitation backend for portfolio invitations.

Portfolio invitations do not associate a user entity until the
invitation has been accepted. User info, including DOD ID, is held on
the invitation itself. When a user accepts and invitation, their user
entry is associated with the corresponding `portfolio_role` entry.

The same change will be applied to `application_role` and application
invitations. For now, small changes have been made to
application-related methods so that that flow works as-is.

tests/routes/portfolios/test_members.py

@@ -1,9 +1,11 @@
 from flask import url_for
 
-from tests.factories import UserFactory, PortfolioFactory
 from atst.domain.permission_sets import PermissionSets
+from atst.models import PortfolioInvitation
 from atst.queue import queue
 
+from tests.factories import UserFactory, PortfolioFactory
+
 _DEFAULT_PERMS_FORM_DATA = {
     "permission_sets-perms_app_mgmt": PermissionSets.VIEW_PORTFOLIO_APPLICATION_MANAGEMENT,
     "permission_sets-perms_funding": PermissionSets.VIEW_PORTFOLIO_FUNDING,
@@ -23,8 +25,8 @@ def test_user_with_permission_has_add_member_link(client, user_session):
     )
 
 
-def test_create_member(client, user_session):
-    user = UserFactory.create()
+def test_create_member(client, user_session, session):
+    user_data = UserFactory.dictionary()
     portfolio = PortfolioFactory.create()
     user_session(portfolio.owner)
     queue_length = len(queue.get_queue())
@@ -32,20 +34,25 @@ def test_create_member(client, user_session):
     response = client.post(
         url_for("portfolios.create_member", portfolio_id=portfolio.id),
         data={
-            "user_data-dod_id": user.dod_id,
-            "user_data-first_name": "user_data-Wilbur",
-            "user_data-last_name": "user_data-Zuckerman",
-            "user_data-email": "user_data-some_pig@zuckermans.com",
-            "user_data-portfolio_role": "user_data-developer",
+            "user_data-dod_id": user_data.get("dod_id"),
+            "user_data-first_name": user_data.get("first_name"),
+            "user_data-last_name": user_data.get("last_name"),
+            "user_data-email": user_data.get("email"),
             **_DEFAULT_PERMS_FORM_DATA,
         },
         follow_redirects=True,
     )
 
     assert response.status_code == 200
-    assert user.full_name in response.data.decode()
-    assert user.has_portfolios
-    assert user.portfolio_invitations
+    full_name = "{} {}".format(user_data.get("first_name"), user_data.get("last_name"))
+    assert full_name in response.data.decode()
+
+    invitation = (
+        session.query(PortfolioInvitation)
+        .filter_by(dod_id=user_data.get("dod_id"))
+        .one()
+    )
+    assert invitation.role.portfolio == portfolio
+
     assert len(queue.get_queue()) == queue_length + 1
-    portfolio_role = user.portfolio_roles[0]
-    assert len(portfolio_role.permission_sets) == 5
+    assert len(invitation.role.permission_sets) == 5