mirror of
https://github.com/ZwareBear/awx.git
synced 2026-03-31 05:03:35 -05:00
89 lines
3.8 KiB
Python
89 lines
3.8 KiB
Python
import pytest
|
|
|
|
from awx.main.access import NotificationTemplateAccess
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_get_queryset_orgmember(notification_template, user):
|
|
access = NotificationTemplateAccess(user('user', False))
|
|
notification_template.organization.member_role.members.add(user('user', False))
|
|
assert access.get_queryset().count() == 0
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_get_queryset_nonorgmember(notification_template, user):
|
|
access = NotificationTemplateAccess(user('user', False))
|
|
assert access.get_queryset().count() == 0
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_get_queryset_su(notification_template, user):
|
|
access = NotificationTemplateAccess(user('user', True))
|
|
assert access.get_queryset().count() == 1
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_get_queryset_orgadmin(notification_template, user):
|
|
access = NotificationTemplateAccess(user('admin', False))
|
|
notification_template.organization.admin_role.members.add(user('admin', False))
|
|
assert access.get_queryset().count() == 1
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_get_queryset_org_auditor(notification_template, org_auditor):
|
|
access = NotificationTemplateAccess(org_auditor)
|
|
assert access.get_queryset().count() == 1
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_access_superuser(notification_template_factory):
|
|
nf_objects = notification_template_factory('test-orphaned', organization='test', superusers=['admin'])
|
|
admin = nf_objects.superusers.admin
|
|
nf = nf_objects.notification_template
|
|
|
|
access = NotificationTemplateAccess(admin)
|
|
assert access.can_read(nf)
|
|
assert access.can_change(nf, None)
|
|
assert access.can_delete(nf)
|
|
|
|
nf.organization = None
|
|
nf.save()
|
|
|
|
assert access.can_read(nf)
|
|
assert access.can_change(nf, None)
|
|
assert access.can_delete(nf)
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_access_admin(organization_factory, notification_template_factory):
|
|
other_objects = organization_factory('other')
|
|
present_objects = organization_factory('present',
|
|
users=['admin'],
|
|
notification_templates=['test-notification'],
|
|
roles=['present.admin_role:admin'])
|
|
|
|
notification_template = present_objects.notification_templates.test_notification
|
|
other_org = other_objects.organization
|
|
present_org = present_objects.organization
|
|
admin = present_objects.users.admin
|
|
|
|
access = NotificationTemplateAccess(admin)
|
|
assert not access.can_change(notification_template, {'organization': other_org.id})
|
|
assert access.can_read(notification_template)
|
|
assert access.can_change(notification_template, None)
|
|
assert access.can_change(notification_template, {'organization': present_org.id})
|
|
assert access.can_delete(notification_template)
|
|
|
|
nf = notification_template_factory("test-orphaned")
|
|
assert not access.can_read(nf)
|
|
assert not access.can_change(nf, None)
|
|
assert not access.can_delete(nf)
|
|
|
|
@pytest.mark.django_db
|
|
def test_notification_template_access_org_user(notification_template, user):
|
|
u = user('normal', False)
|
|
notification_template.organization.member_role.members.add(u)
|
|
access = NotificationTemplateAccess(user('normal', False))
|
|
assert not access.can_read(notification_template)
|
|
assert not access.can_change(notification_template, None)
|
|
assert not access.can_delete(notification_template)
|
|
|
|
@pytest.mark.django_db
|
|
def test_notificaiton_template_orphan_access_org_admin(notification_template, organization, org_admin):
|
|
notification_template.organization = None
|
|
access = NotificationTemplateAccess(org_admin)
|
|
assert not access.can_change(notification_template, {'organization': organization.id})
|