def test3_admin_userpermission_change():
    restart()
    authRegisterDict1 = auth_register(
        "*****@*****.**", "123456", "Tim", "Hu")
    token1 = authRegisterDict1["token"]
    UID1 = authRegisterDict1['u_id']
    authRegisterDict2 = auth_register(
        "*****@*****.**", "1we33456", "Hayden", "Smith")
    token2 = authRegisterDict2["token"]
    UID2 = authRegisterDict2['u_id']
    authRegisterDict3 = auth_register(
        "*****@*****.**", "1we33ee456", "Jeff", "Lu")
    token3 = authRegisterDict3["token"]

    UID3 = authRegisterDict3['u_id']

    authRegisterDict4 = auth_register(
        "*****@*****.**", "jijijij37236", 'daniel', 'quin')
    token4 = authRegisterDict4["token"]

    UID4 = authRegisterDict4['u_id']
    admin_userpermission_change(token1,2,2)
    with pytest.raises(AccessError, match=r".*"):

        admin_userpermission_change(token2, 3, 1)
def test6():
    restart()
    authRegisterDict1 = auth_register(
        "*****@*****.**", "123456", "Tim", "Hu")
    token1 = authRegisterDict1["token"]
    UID1 = authRegisterDict1['u_id']
    authRegisterDict2 = auth_register(
        "*****@*****.**", "1we33456", "Hayden", "Smith")
    token2 = authRegisterDict2["token"]
    UID2 = authRegisterDict2['u_id']
    authRegisterDict3 = auth_register(
        "*****@*****.**", "1we33ee456", "Jeff", "Lu")
    token3 = authRegisterDict3["token"]

    UID3 = authRegisterDict3['u_id']

    authRegisterDict4 = auth_register(
        "*****@*****.**", "jijijij37236", 'daniel', 'quin')
    token4 = authRegisterDict4["token"]

    UID4 = authRegisterDict4['u_id']
    admin_userpermission_change(token1,3,2)
    admin_userpermission_change(token1,2,1)
    admin_userpermission_change(token2,4,1)
    userDict = load()['userDict']
    assert userDict[1]['permission_id'] == 1
    assert userDict[2]['permission_id'] == 2
    assert userDict[3]['permission_id'] == 1
Beispiel #3
0
def adminUserPermissionChange():
    '''Given a User by their user ID, set their permissions
    to new permissions described by permission_id'''

    token = request.form.get('token')
    u_id = request.form.get('u_id')
    permission_id = request.form.get('permission_id')

    try:
        return dumps(admin_userpermission_change(token, u_id, permission_id))
    except ValueError as e:
        raise e
    except AccessError as e:
        raise e
Beispiel #4
0
def test_admin_userpermission_change():
    '''
    assumption:
        [email protected] is the only registered email for now.
        2.all the value errors have been modified into specfic words.
        3.there is a permission id dictionary which contains 3 different types of permission id.
        [email protected] hasn't been registered.
    '''
    #successful test:
    reset_data()
    auth_dic1 = auth_register("*****@*****.**", "123456", "firstone",
                              "lastone")
    auth_dic1 = auth_login("*****@*****.**", "123456")
    token1 = auth_dic1['token']
    uid1 = auth_dic1['u_id']

    auth_dic2 = auth_register("*****@*****.**", "123456", "firstone",
                              "lastone")
    auth_dic2 = auth_login("*****@*****.**", "123456")
    token2 = auth_dic2['token']
    uid2 = auth_dic2['u_id']

    auth_dic3 = auth_register("*****@*****.**", "123456", "firstone",
                              "lastone")
    auth_dic3 = auth_login("*****@*****.**", "123456")
    token3 = auth_dic3['token']

    assert admin_userpermission_change(token1, uid2, 1) == {}

    #test1:u_id does not refer to a valid user
    with pytest.raises(ValueError):
        admin_userpermission_change(token1, 10, 1)

    #test2:permission_id does not refer to a value permission
    with pytest.raises(
            ValueError,
            match=r'permission_id does not refer to a value permission'):
        admin_userpermission_change(token1, uid2, 10)

    #test3:The authorised user is not an admin or owner
    with pytest.raises(AccessError,
                       match=r'the authorised user is not an admin or owner'):
        admin_userpermission_change(token3, uid1, 1)

    auth_logout(token1)
    auth_logout(token2)
    auth_logout(token3)

    reset_data()
Beispiel #5
0
def admin():
    token = request.form.get('token')
    u_id = request.form.get('u_id')
    permission_id = request.form.get('permission_id')
    admin_userpermission_change(token, u_id, permission_id)
    return dumps({})
Beispiel #6
0
def admin():
    ''' Route to userpermission change'''
    return admin_userpermission_change(request.form.get('token'), \
    request.form.get('u_id'), request.form.get('permission_id'))
Beispiel #7
0
def app_admin_userpermission_change():
    token = get_args('token')
    u_id = int(get_args('u_id'))
    permission_id = int(get_args('permission_id'))
    return dumps(admin_userpermission_change(token, u_id, permission_id))