🐛 [#663] Administrator can un-assign co-reviewers

Author: SilviaAmAm

backend/src/openarchiefbeheer/destruction/api/permissions.py

@@ -157,15 +157,15 @@ def has_permission(self, request, view):
         ) or request.user.has_perm("accounts.can_start_destruction")
 
     def has_object_permission(self, request, view, destruction_list):
-        if request.user.has_perm("accounts.can_review_destruction"):
-            return destruction_list.status == ListStatus.ready_to_review
-
         if request.user.has_perm("accounts.can_start_destruction"):
             return destruction_list.status in [
                 ListStatus.ready_to_review,
                 ListStatus.new,
             ]
 
+        if request.user.has_perm("accounts.can_review_destruction"):
+            return destruction_list.status == ListStatus.ready_to_review
+
         return False