don't allow us to create permissions decorator without permissions

ie: not for an organisation, and not for a service

tests/app/main/test_permissions.py

@@ -156,6 +156,42 @@ def test_user_has_permissions_for_organisation(
     index()
 
 
+def test_platform_admin_can_see_orgs_they_dont_have(
+    client,
+    platform_admin_user,
+    mocker,
+):
+    platform_admin_user.organisations = []
+    mocker.patch('app.user_api_client.get_user', return_value=platform_admin_user)
+    client.login(platform_admin_user)
+
+    request.view_args = {'org_id': 'org_2'}
+
+    @user_has_permissions()
+    def index():
+        pass
+
+    index()
+
+
+def test_cant_use_decorator_without_view_args(
+    client,
+    platform_admin_user,
+    mocker,
+):
+    mocker.patch('app.user_api_client.get_user', return_value=platform_admin_user)
+    client.login(platform_admin_user)
+
+    request.view_args = {}
+
+    @user_has_permissions()
+    def index():
+        pass
+
+    with pytest.raises(NotImplementedError):
+        index()
+
+
 def test_user_doesnt_have_permissions_for_organisation(
     client,
     mocker,