fix: handle case where user does not belong to VO supported by the pr…

…oject

ai4papi/routers/v1/deployments/tools.py

@@ -43,11 +43,10 @@ def get_deployments(
     auth_info = auth.get_user_info(token=authorization.credentials)
 
     # If no VOs, then retrieve jobs from all user VOs
-    # Else only retrieve from allowed VOs
+    # Always remove VOs that do not belong to the project
     if not vos:
         vos = auth_info['vos']
-    else:
-        vos = set(vos).intersection(auth_info['vos'])
+    vos = set(vos).intersection(set(papiconf.MAIN_CONF['auth']['VO']))
     if not vos:
         raise HTTPException(
             status_code=401,
@@ -201,7 +200,7 @@ def create_deployment(
         priority = 50
 
     base_domain = papiconf.MAIN_CONF['lb']['domain'][vo]
-    
+
     # Create a default secret for the Federated Server
     _ = ai4secrets.create_secret(
         vo=vo,