Fixed bug to use act_as user instead of user

aaad/authorizers.py

@@ -90,7 +90,7 @@ def authorize(self, user, act_as, resource, logging, info, data, content_type, a
             allowed_users_list = []
             allowed_actions = []
             if 'action' in self.data[act_as] and self.data[act_as]['action'] != None:
-                for item in self.data[user]['action'][action]:
+                for item in self.data[act_as]['action'][action]:
                     temp_item = {}
                     if type(item) == str:
                         temp_item = {}