Use defined rows instead of hybrid property for query filter

Author: kompotkot

brood/resources/actions.py

@@ -41,8 +41,8 @@ def acl_auth(
         .filter(models.ResourceHolderPermission.resource_id == resource_id)
         .filter(
             or_(
-                models.ResourceHolderPermission.holder_id == user_id,
-                models.ResourceHolderPermission.holder_id.in_(user_group_id_list),
+                models.ResourceHolderPermission.user_id == user_id,
+                models.ResourceHolderPermission.group_id.in_(user_group_id_list),
             )
         )
         .all()

brood/resources/api.py

@@ -214,7 +214,7 @@ async def update_resource_handler(
     - **drop_keys** (list): List of keys to drop
     """
     ensure_resource_permission(
-        db_session, current_user.id, resource_id, {data.ResourcePermissions.ADMIN},
+        db_session, current_user.id, resource_id, {data.ResourcePermissions.UPDATE},
     )
     try:
         updated_resource = actions.update_resource_data(
@@ -247,7 +247,7 @@ async def delete_resource_handler(
     - **resource_id** (uuid): Resource ID
     """
     ensure_resource_permission(
-        db_session, current_user.id, resource_id, {data.ResourcePermissions.ADMIN},
+        db_session, current_user.id, resource_id, {data.ResourcePermissions.DELETE},
     )
     try:
         resource = actions.delete_resource(db_session, resource_id)