invitation cannot be reused if wrong user accepts it

2018-10-31 14:00:13 -04:00
parent 0a176239b7
commit cb25dcdd32
2 changed files with 12 additions and 0 deletions
--- a/atst/domain/invitations.py
+++ b/atst/domain/invitations.py
@@ -70,6 +70,8 @@ class Invitations(object):
        invite = Invitations._get(token)

        if invite.user.dod_id != user.dod_id:
+            if invite.is_pending:
+                Invitations._update_status(invite, InvitationStatus.REJECTED)
            raise WrongUserError(user, invite)

        elif invite.is_expired: