-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
test(settings): External Link API ViewSet permission checks
- Loading branch information
Showing
1 changed file
with
182 additions
and
0 deletions.
There are no files selected for viewing
182 changes: 182 additions & 0 deletions
182
app/settings/tests/functional/external_links/test_external_link_viewset.py
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,182 @@ | ||
import pytest | ||
import unittest | ||
import requests | ||
|
||
|
||
from django.contrib.auth import get_user_model | ||
from django.contrib.auth.models import AnonymousUser, User | ||
from django.contrib.contenttypes.models import ContentType | ||
from django.test import TestCase | ||
|
||
from access.models import Organization, Team, TeamUsers, Permission | ||
|
||
from api.tests.abstract.api_permissions_viewset import APIPermissions | ||
|
||
from settings.models.external_link import ExternalLink | ||
|
||
|
||
|
||
class ExternalLinkPermissionsAPI(TestCase, APIPermissions): | ||
|
||
model = ExternalLink | ||
|
||
app_namespace = 'v2' | ||
|
||
url_name = '_api_v2_external_link' | ||
|
||
change_data = {'name': 'device'} | ||
|
||
delete_data = {} | ||
|
||
@classmethod | ||
def setUpTestData(self): | ||
"""Setup Test | ||
1. Create an organization for user and item | ||
. create an organization that is different to item | ||
2. Create a team | ||
3. create teams with each permission: view, add, change, delete | ||
4. create a user per team | ||
""" | ||
|
||
organization = Organization.objects.create(name='test_org') | ||
|
||
self.organization = organization | ||
|
||
different_organization = Organization.objects.create(name='test_different_organization') | ||
|
||
|
||
|
||
# self.url_kwargs = {} | ||
|
||
|
||
view_permissions = Permission.objects.get( | ||
codename = 'view_' + self.model._meta.model_name, | ||
content_type = ContentType.objects.get( | ||
app_label = self.model._meta.app_label, | ||
model = self.model._meta.model_name, | ||
) | ||
) | ||
|
||
view_team = Team.objects.create( | ||
team_name = 'view_team', | ||
organization = organization, | ||
) | ||
|
||
view_team.permissions.set([view_permissions]) | ||
|
||
|
||
|
||
add_permissions = Permission.objects.get( | ||
codename = 'add_' + self.model._meta.model_name, | ||
content_type = ContentType.objects.get( | ||
app_label = self.model._meta.app_label, | ||
model = self.model._meta.model_name, | ||
) | ||
) | ||
|
||
add_team = Team.objects.create( | ||
team_name = 'add_team', | ||
organization = organization, | ||
) | ||
|
||
add_team.permissions.set([add_permissions]) | ||
|
||
|
||
|
||
change_permissions = Permission.objects.get( | ||
codename = 'change_' + self.model._meta.model_name, | ||
content_type = ContentType.objects.get( | ||
app_label = self.model._meta.app_label, | ||
model = self.model._meta.model_name, | ||
) | ||
) | ||
|
||
change_team = Team.objects.create( | ||
team_name = 'change_team', | ||
organization = organization, | ||
) | ||
|
||
change_team.permissions.set([change_permissions]) | ||
|
||
|
||
|
||
delete_permissions = Permission.objects.get( | ||
codename = 'delete_' + self.model._meta.model_name, | ||
content_type = ContentType.objects.get( | ||
app_label = self.model._meta.app_label, | ||
model = self.model._meta.model_name, | ||
) | ||
) | ||
|
||
delete_team = Team.objects.create( | ||
team_name = 'delete_team', | ||
organization = organization, | ||
) | ||
|
||
delete_team.permissions.set([delete_permissions]) | ||
|
||
|
||
self.no_permissions_user = User.objects.create_user(username="test_no_permissions", password="password") | ||
|
||
|
||
self.view_user = User.objects.create_user(username="test_user_view", password="password") | ||
teamuser = TeamUsers.objects.create( | ||
team = view_team, | ||
user = self.view_user | ||
) | ||
|
||
|
||
self.item = self.model.objects.create( | ||
organization = self.organization, | ||
name = 'one' | ||
) | ||
|
||
|
||
self.url_view_kwargs = {'pk': self.item.id} | ||
|
||
self.add_data = { | ||
'name': 'team_post', | ||
'organization': self.organization.id, | ||
'template': 'http://site.tld/{{ template }}' | ||
} | ||
|
||
|
||
self.add_user = User.objects.create_user(username="test_user_add", password="password") | ||
teamuser = TeamUsers.objects.create( | ||
team = add_team, | ||
user = self.add_user | ||
) | ||
|
||
self.change_user = User.objects.create_user(username="test_user_change", password="password") | ||
teamuser = TeamUsers.objects.create( | ||
team = change_team, | ||
user = self.change_user | ||
) | ||
|
||
self.delete_user = User.objects.create_user(username="test_user_delete", password="password") | ||
teamuser = TeamUsers.objects.create( | ||
team = delete_team, | ||
user = self.delete_user | ||
) | ||
|
||
|
||
self.different_organization_user = User.objects.create_user(username="test_different_organization_user", password="password") | ||
|
||
|
||
different_organization_team = Team.objects.create( | ||
team_name = 'different_organization_team', | ||
organization = different_organization, | ||
) | ||
|
||
different_organization_team.permissions.set([ | ||
view_permissions, | ||
add_permissions, | ||
change_permissions, | ||
delete_permissions, | ||
]) | ||
|
||
TeamUsers.objects.create( | ||
team = different_organization_team, | ||
user = self.different_organization_user | ||
) |