review display view permission updates

opentech/apply/review/views.py

@@ -174,17 +174,19 @@ class ReviewDisplay(DetailView):
         submission = review.submission
         partner_has_access = submission.partners.filter(pk=request.user.pk).exists()
 
-        if user.is_reviewer and not user.is_apply_staff:
+        if user.is_apply_staff:
+            pass
+        elif user.is_reviewer:
             if user != author and not review.reviewer_visibility:
                 raise PermissionDenied
-
         elif user.is_partner:
             if user != author and not (partner_has_access and review.reviewer_visibility):
                 raise PermissionDenied
-
         elif user.is_community_reviewer:
             if user != author and not (submission.community_review and review.reviewer_visibility):
                 raise PermissionDenied
+        else:
+            raise PermissionDenied
 
         if review.is_draft:
             return HttpResponseRedirect(reverse_lazy('apply:submissions:reviews:form', args=(review.submission.id,)))