def test_get_out_of_scope_permissions_user_without_permissions(
staff_user, permission_manage_orders, permission_manage_users):
permissions = [
AccountPermissions.MANAGE_USERS, OrderPermissions.MANAGE_ORDERS
]
missing_perms = get_out_of_scope_permissions(staff_user, permissions)
assert missing_perms == permissions
def test_get_out_of_scope_permissions_user_does_not_have_all_permissions(
staff_user, permission_manage_orders, permission_manage_users):
staff_user.user_permissions.add(permission_manage_orders)
missing_perms = get_out_of_scope_permissions(
staff_user,
[AccountPermissions.MANAGE_USERS, OrderPermissions.MANAGE_ORDERS])
assert missing_perms == [AccountPermissions.MANAGE_USERS]
def test_get_out_of_scope_permissions_app_has_all_permissions(
app, permission_manage_orders, permission_manage_users):
app.permissions.add(permission_manage_orders, permission_manage_users)
missing_perms = get_out_of_scope_permissions(
app,
[AccountPermissions.MANAGE_USERS, OrderPermissions.MANAGE_ORDERS],
)
assert missing_perms == []
