Merge pull request #372 from dod-ccpo/workspace_users_project_permissions

Workspace users project permissions

atst/domain/projects.py

@@ -5,6 +5,7 @@ from atst.domain.exceptions import NotFoundError
 from atst.models.permissions import Permissions
 from atst.models.project import Project
 from atst.models.environment import Environment
+from atst.models.environment_role import EnvironmentRole
 
 
 class Projects(object):

atst/domain/roles.py

@@ -117,11 +117,7 @@ WORKSPACE_ROLES = [
         "name": "developer",
         "display_name": "Developer",
         "description": "Views only the projects and environments they are granted access to. Can also view members associated with each environment.",
-        "permissions": [
-            Permissions.VIEW_USAGE_REPORT,
-            Permissions.VIEW_WORKSPACE,
-            Permissions.VIEW_APPLICATION_IN_WORKSPACE,
-        ],
+        "permissions": [Permissions.VIEW_USAGE_REPORT, Permissions.VIEW_WORKSPACE],
     },
     {
         "name": "billing_auditor",
@@ -131,7 +127,6 @@ WORKSPACE_ROLES = [
             Permissions.VIEW_USAGE_REPORT,
             Permissions.VIEW_USAGE_DOLLARS,
             Permissions.VIEW_WORKSPACE,
-            Permissions.VIEW_APPLICATION_IN_WORKSPACE,
         ],
     },
     {
@@ -143,7 +138,6 @@ WORKSPACE_ROLES = [
             Permissions.VIEW_ASSIGNED_CSP_ROLE_CONFIGURATIONS,
             Permissions.VIEW_ATAT_PERMISSIONS,
             Permissions.VIEW_WORKSPACE,
-            Permissions.VIEW_APPLICATION_IN_WORKSPACE,
         ],
     },
 ]

tests/domain/test_workspaces.py

@@ -167,6 +167,13 @@ def test_scoped_workspace_only_returns_a_users_projects_and_environments(
         "My project",
         ["dev", "staging", "prod"],
     )
+    Projects.create(
+        workspace_owner,
+        workspace,
+        "My Project 2",
+        "My project 2",
+        ["dev", "staging", "prod"],
+    )
     developer = UserFactory.from_atat_role("developer")
     dev_environment = Environments.add_member(
         new_project.environments[0], developer, "developer"