Tweak proj rbac for orphaned projects

Slight tweak to the rbac for projects related to the user who created
them.  IF a user created a project but it is orphaned/not associated
with an organization then they will be able to see/change it.  If,
however, it is created and associated with an organization and then they
are removed as an org admin they will no longer have access to it.
This commit is contained in:
Matthew Jones
2015-10-13 16:40:53 -04:00
parent d0888c1bcb
commit fd33d7df58
2 changed files with 7 additions and 2 deletions

View File

@@ -209,7 +209,7 @@ class ProjectsTest(BaseTransactionTest):
self.assertEquals(results['count'], 10)
# org admin
results = self.get(projects, expect=200, auth=self.get_normal_credentials())
self.assertEquals(results['count'], 8)
self.assertEquals(results['count'], 9)
# user on a team
results = self.get(projects, expect=200, auth=self.get_other_credentials())
self.assertEquals(results['count'], 5)