Auth tweak

[hazmat345]

The only real change here is the checking for user update permission. I didn't verify this, but it looked like before this change anybody could have changed any user's username.

There's a slight cost to the change - in the case where a user with USER_UPDATE is updating permissions for another user it'll check for the permission twice. I don't think that's a very expensive check, but if it is we could add a if user_id == str(self.current_user.id): check.

[loganasherjones]

Linting is failing. Otherwise, this LGTM

[loganasherjones]

Linting

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (auth_update@198a629). Click here to learn what that means.
The diff coverage is 100%.

@@              Coverage Diff               @@
##             auth_update     #123   +/-   ##
==============================================
  Coverage               ?   73.74%           
==============================================
  Files                  ?       31           
  Lines                  ?     1786           
  Branches               ?        0           
==============================================
  Hits                   ?     1317           
  Misses                 ?      469           
  Partials               ?        0

Impacted Files	Coverage Δ
brew_view/specification.py	83.33% <ø> (ø)
brew_view/controllers/misc_controllers.py	85.71% <ø> (ø)
brew_view/controllers/token_api.py	76.41% <100%> (ø)
brew_view/controllers/users_api.py	65.16% <100%> (ø)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 198a629...014ec7b. Read the comment docs.