def test_admin_can_create_managers_deposit(self):
token = login(self, '*****@*****.**', 'password1')
resp = create_deposit(self, token, msg='manager', user_id=3)
self.assertIn('manager', resp.data.decode('utf-8'))
# read to verify
token = login(self, '*****@*****.**', 'password1')
resp = send_get_request(self, 'api/v1/deposits/1', token=token)
self.assertIn('manager', resp.data.decode('utf-8'))
def test_admin_can_create_normals_task(self):
token = login(self, '*****@*****.**', 'password')
resp = create_task(self, token, msg='normal', user_id=5)
self.assertIn('normal', resp.data.decode('utf-8'))
# read to verify
token = login(self, '*****@*****.**', 'password')
resp = send_get_request(self, 'api/v1/tasks/1', token=token)
self.assertIn('normal', resp.data.decode('utf-8'))
def test_man_cannot_read_admin(self):
token = login(self, '*****@*****.**', 'password1')
resp = send_get_request(self, 'api/v1/users/1', token=token)
self.assertNotIn('admin1', resp.data.decode('utf-8'))
def test_normal_can_read_own(self):
token = login(self, '*****@*****.**', 'password1')
resp = send_get_request(self, 'api/v1/users/5', token=token)
self.assertIn('normal5', resp.data.decode('utf-8'))
def test_manager_can_read_own(self):
token = login(self, '*****@*****.**', 'password1')
resp = send_get_request(self, 'api/v1/users/3', token=token)
self.assertIn('man3', resp.data.decode('utf-8'))
def check_account_deleted(self, user_id):
token = login(self, '*****@*****.**', 'password')
resp = send_get_request(self,
'api/v1/users/' + str(user_id),
token=token)
self.assertNotEqual(resp.status_code, 200)
def test_user_cannot_read_all(self):
token = login(self, '*****@*****.**', 'password1')
resp = create_deposit(self, token, msg='normal')
resp = send_get_request(self, 'api/v1/deposits/all', token=token)
self.assertNotIn('normal', resp.data.decode('utf-8'))
def test_admin_can_read_own(self):
token = login(self, '*****@*****.**', 'password')
resp = create_task(self, token, msg='admin')
self.assertIn('70', resp.data.decode('utf-8'))
resp = send_get_request(self, 'api/v1/tasks/1', token=token)
self.assertIn('admin', resp.data.decode('utf-8'))
def test_admin_can_read_normals_deposit(self):
token = login(self, '*****@*****.**', 'password1')
resp = create_deposit(self, token, msg='normal')
token = login(self, '*****@*****.**', 'password1')
resp = send_get_request(self, 'api/v1/deposits/1', token=token)
self.assertIn('normal', resp.data.decode('utf-8'))
def test_normal_cannot_read_man(self):
token = login(self, '*****@*****.**', 'password')
resp = send_get_request(self, 'api/v1/users/3', token=token)
self.assertNotIn('man3', resp.data.decode('utf-8'))
def test_man_can_read_normal(self):
token = login(self, '*****@*****.**', 'password')
resp = send_get_request(self, 'api/v1/users/6', token=token)
self.assertIn('normal6', resp.data.decode('utf-8'))
def test_admin_can_read_man(self):
token = login(self, '*****@*****.**', 'password')
resp = send_get_request(self, 'api/v1/users/4', token=token)
self.assertIn('man4', resp.data.decode('utf-8'))
def test_user_can_read_own_task(self):
token = login(self, '*****@*****.**', 'password')
resp = create_task(self, token, msg='normal')
token = login(self, '*****@*****.**', 'password')
resp = send_get_request(self, 'api/v1/tasks', token=token)
self.assertIn('normal', resp.data.decode('utf-8'))
def test_admin_can_read_managers_task(self):
token = login(self, '*****@*****.**', 'password')
resp = create_task(self, token, msg='manager')
token = login(self, '*****@*****.**', 'password')
resp = send_get_request(self, 'api/v1/tasks/all', token=token)
self.assertIn('manager', resp.data.decode('utf-8'))
def test_man_can_read_own(self):
token = login(self, '*****@*****.**', 'password1')
resp = create_deposit(self, token, msg='man')
self.assertIn('5.5', resp.data.decode('utf-8'))
resp = send_get_request(self, 'api/v1/deposits/1', token=token)
self.assertIn('man', resp.data.decode('utf-8'))
def check_deposit_deleted(self, deposit_id):
token = login(self, '*****@*****.**', 'password1')
resp = send_get_request(self,
'api/v1/deposits/' + str(deposit_id),
token=token)
self.assertNotEqual(resp.status_code, 200)
def test_anon_cannot_read_any_task(self):
token = login(self, '*****@*****.**', 'password')
resp = create_task(self, token, msg='normal')
resp = send_get_request(self, 'api/v1/tasks/1')
self.assertNotIn('normal', resp.data.decode('utf-8'))
