def test_notificaiton_template_orphan_access_org_admin(notification_template,
organization,
org_admin):
notification_template.organization = None
access = NotificationTemplateAccess(org_admin)
assert not access.can_change(notification_template,
{'organization': organization.id})
def test_notification_template_access_admin(role, organization_factory,
notification_template_factory):
other_objects = organization_factory('other')
present_objects = organization_factory(
'present',
users=['admin'],
notification_templates=['test-notification'],
roles=[role])
notification_template = present_objects.notification_templates.test_notification
other_org = other_objects.organization
present_org = present_objects.organization
admin = present_objects.users.admin
access = NotificationTemplateAccess(admin)
assert not access.can_change(notification_template,
{'organization': other_org.id})
assert access.can_read(notification_template)
assert access.can_change(notification_template, None)
assert access.can_change(notification_template,
{'organization': present_org.id})
assert access.can_delete(notification_template)
nf = notification_template_factory("test-orphaned")
assert not access.can_read(nf)
assert not access.can_change(nf, None)
assert not access.can_delete(nf)
def test_notification_template_access_org_user(notification_template, user):
u = user('normal', False)
notification_template.organization.member_role.members.add(u)
access = NotificationTemplateAccess(user('normal', False))
assert not access.can_read(notification_template)
assert not access.can_change(notification_template, None)
assert not access.can_delete(notification_template)
def test_notification_template_access_superuser(notification_template_factory):
nf_objects = notification_template_factory('test-orphaned', organization='test', superusers=['admin'])
admin = nf_objects.superusers.admin
nf = nf_objects.notification_template
access = NotificationTemplateAccess(admin)
assert access.can_read(nf)
assert access.can_change(nf, None)
assert access.can_delete(nf)
nf.organization = None
nf.save()
assert access.can_read(nf)
assert access.can_change(nf, None)
assert access.can_delete(nf)
def test_notification_template_get_queryset_orgmember(notification_template,
user):
access = NotificationTemplateAccess(user('user', False))
notification_template.organization.member_role.members.add(
user('user', False))
assert access.get_queryset().count() == 0
def test_notification_template_get_queryset_org_auditor(
notification_template, org_auditor):
access = NotificationTemplateAccess(org_auditor)
assert access.get_queryset().count() == 1
def test_notification_template_get_queryset_su(notification_template, user):
access = NotificationTemplateAccess(user('user', True))
assert access.get_queryset().count() == 1
def test_notification_template_get_queryset_nonorgmember(
notification_template, user):
access = NotificationTemplateAccess(user('user', False))
assert access.get_queryset().count() == 0