Remove user permission ncheck on service function to update project as this is already checked in resource function

Author: Aadesh-Baral

backend/api/projects/resources.py

@@ -386,7 +386,7 @@ def patch(self, project_id):
             return {"Error": "Unable to update project", "SubCode": "InvalidData"}, 400
 
         try:
-            ProjectAdminService.update_project(project_dto, authenticated_user_id)
+            ProjectAdminService.update_project(project_dto)
             return {"Status": "Updated"}, 200
         except InvalidGeoJson as e:
             return {"Invalid GeoJson": str(e)}, 400

backend/services/project_admin_service.py

@@ -114,7 +114,7 @@ def get_project_dto_for_admin(project_id: int) -> ProjectDTO:
         return project.as_dto_for_admin(project_id)
 
     @staticmethod
-    def update_project(project_dto: ProjectDTO, authenticated_user_id: int):
+    def update_project(project_dto: ProjectDTO):
         project_id = project_dto.project_id
 
         if project_dto.project_status == ProjectStatus.PUBLISHED.name:
@@ -125,18 +125,8 @@ def update_project(project_dto: ProjectDTO, authenticated_user_id: int):
         if project_dto.license_id:
             ProjectAdminService._validate_imagery_licence(project_dto.license_id)
 
-        # To be handled before reaching this function
-        if ProjectAdminService.is_user_action_permitted_on_project(  # FLAGGED: ALREADY CHECKED IN VIEW FUNCTION
-            authenticated_user_id, project_id
-        ):
-            project = ProjectAdminService._get_project_by_id(project_id)
-            project.update(project_dto)
-        else:
-            raise Forbidden(
-                sub_code="USER_NOT_PROJECT_MANAGER",
-                user_id=authenticated_user_id,
-                project_id=project_id,
-            )
+        project = ProjectAdminService._get_project_by_id(project_id)
+        project.update(project_dto)
 
         return project
 

tests/backend/integration/services/test_project_admin_service.py

@@ -287,7 +287,7 @@ def test_update_published_project_with_incomplete_default_locale_raises_error(
         mock_user.return_value = stub_admin_user
         # Act / Assert
         with self.assertRaises(ProjectAdminServiceError):
-            ProjectAdminService.update_project(dto, mock_user.id)
+            ProjectAdminService.update_project(dto)
 
     @patch.object(User, "get_by_id")
     @patch.object(Project, "update")
@@ -310,7 +310,7 @@ def test_updating_a_private_project_with_no_allowed_users_raises_error(
 
         # Act
         try:
-            ProjectAdminService.update_project(dto, mock_user.id)
+            ProjectAdminService.update_project(dto)
         # Assert
         except ProjectAdminServiceError:
             self.fail("update_project raised an exception when setting it as private")
@@ -349,7 +349,7 @@ def test_update_project_with_non_existant_license_raises_error(
         mock_user.return_value = stub_admin_user
         # Act / Assert
         with self.assertRaises(ProjectAdminServiceError):
-            ProjectAdminService.update_project(dto, mock_user.id)
+            ProjectAdminService.update_project(dto)
 
     @patch.object(User, "get_by_id")
     @patch.object(Project, "update")
@@ -386,7 +386,7 @@ def test_updating_a_project_with_different_roles_raises_error(
         mock_user.return_value = stub_user
         # Act/Assert
         with self.assertRaises(Forbidden):
-            ProjectAdminService.update_project(dto, mock_user.id)
+            ProjectAdminService.update_project(dto)
 
     def test_updating_a_project_with_valid_project_info(self):
         locales = []
@@ -398,7 +398,7 @@ def test_updating_a_project_with_valid_project_info(self):
         info.instructions = "Test instructions"
         locales.append(info)
 
-        test_project, test_user = create_canned_project()
+        test_project, _ = create_canned_project()
 
         dto = ProjectDTO()
         dto.project_id = test_project.id
@@ -411,7 +411,7 @@ def test_updating_a_project_with_valid_project_info(self):
         dto.validation_editors = ["ID"]
         dto.project_info_locales = locales
         # Act
-        updated_project = ProjectAdminService.update_project(dto, test_user.id)
+        updated_project = ProjectAdminService.update_project(dto)
         # Assert
         self.assertEqual(
             updated_project.difficulty, ProjectDifficulty[dto.difficulty.upper()].value