Fixes authentication on get_object_or_error

This commit makes authentication required to access objects with `get_object_or_error`.

Previously, authentication was checked only... if object was not found

taiga/base/api/utils/__init__.py

@@ -55,9 +55,9 @@ def get_object_or_error(queryset, user, *filter_args, **filter_kwargs):
     (if the user is not logged in).
 
     """
+    if not user.is_authenticated:
+        raise NotAuthenticated
     try:
         return _get_object_or_404(queryset, *filter_args, **filter_kwargs)
     except (Http404, TypeError, ValueError):
-        if not user.is_authenticated:
-            raise NotAuthenticated
         raise Http404