def test_inactive_user_group_does_not_affect_global_permissions_inverse(self):
# Issue #138: Inactive User Groups affecting permissions
# Add user to inactive user group, set specific permissions on user
# group and disable inherit-from-default. User permissions should still
# inherit from default.
self.ug1 = fixture.create_user_group(u'G1')
self.ug1.inherit_default_permissions = False
user_group_model = UserGroupModel()
user_group_model.add_user_to_group(self.ug1, self.u1)
user_group_model.update(self.ug1, {'users_group_active': False})
# disable fork and create on user group
user_group_model.revoke_perm(self.ug1, perm='hg.create.repository')
user_group_model.grant_perm(self.ug1, perm='hg.create.none')
user_group_model.revoke_perm(self.ug1, perm='hg.fork.repository')
user_group_model.grant_perm(self.ug1, perm='hg.fork.none')
user_model = UserModel()
# enable fork and create on default user
usr = '******'
user_model.revoke_perm(usr, 'hg.create.none')
user_model.grant_perm(usr, 'hg.create.repository')
user_model.revoke_perm(usr, 'hg.fork.none')
user_model.grant_perm(usr, 'hg.fork.repository')
Session().commit()
u1_auth = AuthUser(user_id=self.u1.user_id)
self.assertEqual(u1_auth.permissions['global'],
set(['hg.create.repository', 'hg.fork.repository',
'hg.register.manual_activate',
'hg.extern_activate.auto',
'repository.read', 'group.read',
'usergroup.read',
'hg.create.write_on_repogroup.true']))
def test_inactive_user_group_does_not_affect_global_permissions_inverse(
self):
# Issue #138: Inactive User Groups affecting permissions
# Add user to inactive user group, set specific permissions on user
# group and disable inherit-from-default. User permissions should still
# inherit from default.
self.ug1 = fixture.create_user_group(u'G1')
self.ug1.inherit_default_permissions = False
user_group_model = UserGroupModel()
user_group_model.add_user_to_group(self.ug1, self.u1)
user_group_model.update(self.ug1, {'users_group_active': False})
# disable fork and create on user group
user_group_model.revoke_perm(self.ug1, perm='hg.create.repository')
user_group_model.grant_perm(self.ug1, perm='hg.create.none')
user_group_model.revoke_perm(self.ug1, perm='hg.fork.repository')
user_group_model.grant_perm(self.ug1, perm='hg.fork.none')
user_model = UserModel()
# enable fork and create on default user
usr = '******'
user_model.revoke_perm(usr, 'hg.create.none')
user_model.grant_perm(usr, 'hg.create.repository')
user_model.revoke_perm(usr, 'hg.fork.none')
user_model.grant_perm(usr, 'hg.fork.repository')
Session().commit()
u1_auth = AuthUser(user_id=self.u1.user_id)
assert u1_auth.permissions['global'] == set([
'hg.create.repository', 'hg.fork.repository',
'hg.register.manual_activate', 'hg.extern_activate.auto',
'repository.read', 'group.read', 'usergroup.read',
'hg.create.write_on_repogroup.true'
])
def test_inactive_user_group_does_not_affect_global_permissions(self):
# Add user to inactive user group, set specific permissions on user
# group and and verify it really is inactive.
self.ug1 = fixture.create_user_group('G1')
user_group_model = UserGroupModel()
user_group_model.add_user_to_group(self.ug1, self.u1)
user_group_model.update(self.ug1, {'users_group_active': False})
# enable fork and create on user group
user_group_model.revoke_perm(self.ug1, perm='hg.create.none')
user_group_model.grant_perm(self.ug1, perm='hg.create.repository')
user_group_model.revoke_perm(self.ug1, perm='hg.fork.none')
user_group_model.grant_perm(self.ug1, perm='hg.fork.repository')
user_model = UserModel()
# disable fork and create on default user
usr = '******'
user_model.revoke_perm(usr, 'hg.create.repository')
user_model.grant_perm(usr, 'hg.create.none')
user_model.revoke_perm(usr, 'hg.fork.repository')
user_model.grant_perm(usr, 'hg.fork.none')
Session().commit()
u1_auth = AuthUser(user_id=self.u1.user_id)
assert u1_auth.permissions['global'] == set([
'hg.create.none', 'hg.fork.none', 'hg.register.manual_activate',
'hg.extern_activate.auto', 'repository.read', 'group.read',
'usergroup.read', 'hg.create.write_on_repogroup.true'
])