From e814f8904d81d8fb96a3ade3e5beadcfd6ddb6c1 Mon Sep 17 00:00:00 2001
From: George Drummond <george-ctr@friends.dds.mil>
Date: Wed, 17 Apr 2019 13:37:28 -0400
Subject: [PATCH] Use correct scoping

---
 atst/routes/portfolios/applications.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/atst/routes/portfolios/applications.py b/atst/routes/portfolios/applications.py
index d94cc063..836fec88 100644
--- a/atst/routes/portfolios/applications.py
+++ b/atst/routes/portfolios/applications.py
@@ -154,8 +154,10 @@ def permission_str(member, edit_perm_set):
 @portfolios_bp.route("/portfolios/<portfolio_id>/applications/<application_id>/team")
 @user_can(Permissions.VIEW_APPLICATION, message="view portfolio applications")
 def application_team(portfolio_id, application_id):
-    application = Applications.get(application_id)
     portfolio = Portfolios.get(g.current_user, portfolio_id)
+    application = Applications.get(
+        resource_id=application_id, portfolio_id=portfolio_id
+    )
 
     environment_users = {}
     for member in application.members: