zware/awx
1
0
Fork 0
mirror of https://github.com/ZwareBear/awx.git synced 2026-05-14 07:48:39 -05:00
Code Issues Packages Projects Releases Wiki Activity

do not allow membership changes to User.admin_role

Browse Source
This commit is contained in:
Wayne Witzel III
2016-07-28 19:26:30 -04:00
parent a078254508
commit 06bb8871d7
2 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
awx/main/tests/functional/api/test_user.py
+10
View File
@@ -66,3 +66,13 @@ def test_create_delete_create_user(post, delete, admin):
}, admin)
print(response.data)
assert response.status_code == 201
@pytest.mark.django_db
def test_add_user_admin_role_member(post, user):
admin = user('admin', is_superuser=True)
normal = user('normal')
url = reverse('api:user_roles_list', args=(admin.pk,))
response = post(url, {'id':normal.admin_role.pk}, admin)
assert response.status_code == 403
assert 'not change membership' in response.rendered_content