def test_user_perms(users):
name1 = Permission.set_code_name('can add users')
name2 = Permission.set_code_name('can edit groups')
perm1 = Permission.find_by_name(name1)
perm2 = Permission.find_by_name(name2)
user = User.find_by_identity('*****@*****.**')
user.add_permissions([perm1, perm2])
assert user.permissions.count() == 2
assert user.user_has_perm(perm2) is True
user.remove_permissions([perm2])
assert user.user_has_perm(perm2) is False
assert user.permissions.count() == 1
def test_group_perms(groups):
name1 = Permission.set_code_name('can view groups')
name2 = Permission.set_code_name('can delete users')
perm1 = Permission.find_by_name(name1)
perm2 = Permission.find_by_name(name2)
grp = Group.find_by_name('test group 1')
grp.add_permissions([perm1, perm2])
assert grp.has_perm(perm2) is True
assert grp.permissions.count() == 2
grp.remove_permissions([perm2])
assert grp.has_perm(perm2) is False
assert grp.permissions.count() == 1
def test_user_get_all_perms(users, groups):
name1 = Permission.set_code_name('can add users')
name2 = Permission.set_code_name('can edit groups')
perm1 = Permission.find_by_name(name1)
perm2 = Permission.find_by_name(name2)
user = User.find_by_identity('*****@*****.**')
grp = Group.find_by_name('test group 1')
grp.add_members([user])
assert len(user.get_all_perms()) == 0
user.add_permissions([perm1])
grp.add_permissions([perm2])
assert len(user.get_all_perms()) == 2
assert user.has_permission(perm2.code_name) is True
assert user.has_permission(perm1.code_name) is True
assert user.has_permissions([perm1.code_name, perm2.code_name]) is True
def test_remove_group_perms(client, groups):
name1 = Permission.set_code_name('can view groups')
name2 = Permission.set_code_name('can delete users')
perm1 = Permission.find_by_name(name1)
perm2 = Permission.find_by_name(name2)
group = Group.find_by_name('test group 3')
group.add_permissions([perm2, perm1])
assert len(group.permissions.all()) == 2
response = client.delete(
f'/api/admin/groups/{group.id}/permissions',
content_type='application/json',
data=json.dumps({'perms': [perm1.id, perm2.id]})
)
data = json.loads(response.data.decode())
assert response.status_code == 200
assert len(data.get('permissions')) == 0
def test_add_group_perms(client, groups):
name1 = Permission.set_code_name('can view groups')
name2 = Permission.set_code_name('can delete users')
perm1 = Permission.find_by_name(name1)
perm2 = Permission.find_by_name(name2)
group = Group.find_by_name('test group 1')
response = client.put(
f'/api/admin/groups/{group.id}/permissions',
content_type='application/json',
data=json.dumps({'perms': [perm1.id, perm2.id]})
)
data = json.loads(response.data.decode())
assert response.status_code == 200
assert len(data.get('permissions')) == 2
assert data.get('permissions')[1]['name'] == 'can view groups'
assert data.get('permissions')[0]['name'] == 'can delete users'
def test_remove_user_perms(client, users):
name1 = Permission.set_code_name('can view groups')
name2 = Permission.set_code_name('can delete users')
perm1 = Permission.find_by_name(name1)
perm2 = Permission.find_by_name(name2)
user = User.find_by_identity('*****@*****.**')
user.add_permissions([perm2, perm1])
assert len(user.permissions.all()) == 2
response = client.delete(
f'/api/admin/users/{user.id}/permissions',
content_type='application/json',
data=json.dumps({'perms': [perm1.id, perm2.id]})
)
data = json.loads(response.data.decode())
assert response.status_code == 200
assert len(data.get('permissions')) == 0