class IsOwnerTests(TestCase):
def setUp(self):
super(IsOwnerTests, self).setUp()
self.permissions_class = IsOwner()
self.user = UserFactory.create()
self.comment = CommentFactory.create(user=self.user, comment='test comment')
def test_is_owner_permission(self):
""" If object.user matches request.user, return True. """
# users has access to their own objects
request = self._make_request(user=self.user, data={'comment': 'update_comment'})
self.assertTrue(self.permissions_class.has_object_permission(request, None, self.comment))
# users CANNOT have access to object of other users
user = UserFactory.create()
request = self._make_request(user=user, data={'username': '******'})
self.assertFalse(self.permissions_class.has_object_permission(request, None, self.comment))
def _make_request(self, user=None, data=None):
request = APIRequestFactory().put('/', data)
if user:
force_authenticate(request, user=user)
return Request(request)
class IsOwnerTests(TestCase):
def setUp(self):
super(IsOwnerTests, self).setUp()
self.permissions_class = IsOwner()
self.user = UserFactory.create()
self.comment = CommentFactory.create(user=self.user, comment='test comment')
def test_is_owner_permission(self):
""" If object.user matches request.user, return True. """
# users has access to their own objects
request = self._make_request(user=self.user, data={'comment': 'update_comment'})
self.assertTrue(self.permissions_class.has_object_permission(request, None, self.comment))
# users CANNOT have access to object of other users
user = UserFactory.create()
request = self._make_request(user=user, data={'username': '******'})
self.assertFalse(self.permissions_class.has_object_permission(request, None, self.comment))
def _make_request(self, user=None, data=None):
request = APIRequestFactory().put('/', data)
if user:
force_authenticate(request, user=user)
return Request(request)
def setUp(self):
super(IsOwnerTests, self).setUp()
self.permissions_class = IsOwner()
self.user = UserFactory.create()
self.comment = CommentFactory.create(user=self.user, comment='test comment')
def setUp(self):
super(IsOwnerTests, self).setUp()
self.permissions_class = IsOwner()
self.user = UserFactory.create()
self.comment = CommentFactory.create(user=self.user, comment='test comment')
