you only to check one assignment cuz it has a unique constraint now. w/ mike

src/spiffworkflow_backend/services/authorization_service.py

@@ -18,25 +18,22 @@ class AuthorizationService:
         principal: PrincipalModel, permission: str, target_uri: str
     ) -> bool:
         """Has_permission."""
-        permission_assignments = (
+        permission_assignment = (
             PermissionAssignmentModel.query.filter_by(
                 principal_id=principal.id, permission=permission
             )
             .join(PermissionTargetModel)
             .filter_by(uri=target_uri)
-            .all()
+            .first()
         )
-        if len(permission_assignments) > 1:
+        if permission_assignment is None:
-            raise Exception(
+            return False
-                "Multiple permission assignments found for query. That should not be possible."
-            )
-        for permission_assignment in permission_assignments:
         if permission_assignment.grant_type.value == "permit":
             return True
         elif permission_assignment.grant_type.value == "deny":
             return False
-
+        else:
-        return False
+            raise Exception("Unknown grant type")
 
     # def refresh_token(self, token: str) -> str:
     #     """Refresh_token."""