def test_can_delete(self):
assert not self.post.permissions.delete.allows(AnonymousIdentity())
identity = Identity(self.user.id)
identity.provides.update(self.user.provides)
assert self.post.permissions.delete.allows(identity)
user = User(username="******",
email="*****@*****.**")
db.session.add(user)
db.session.commit()
identity = Identity(user.id)
assert not self.post.permissions.delete.allows(identity)
user.role = User.MODERATOR
identity.provides.update(user.provides)
assert self.post.permissions.delete.allows(identity)
user.role = User.ADMIN
del user.provides
identity.provides.update(user.provides)
assert self.post.permissions.delete.allows(identity)
def test_can_delete(self):
assert not self.comment.permissions.delete.allows(AnonymousIdentity())
identity = Identity(self.user.id)
identity.provides.update(self.user.provides)
assert self.comment.permissions.delete.allows(identity)
user = User(username="******", email="*****@*****.**")
db.session.add(user)
db.session.commit()
identity = Identity(user.id)
assert not self.comment.permissions.delete.allows(identity)
user.role = User.MODERATOR
identity.provides.update(user.provides)
assert self.comment.permissions.delete.allows(identity)
user.role = User.ADMIN
del user.provides
identity.provides.update(user.provides)
assert self.comment.permissions.delete.allows(identity)
