Exemplo n.º 1
0
    def test_user_permitted_objects_returns_permitted_requests(
        self, user_with_role_assignments, test_garden, test_request
    ):
        permitted_requests = user_permitted_objects(
            user_with_role_assignments, Request, "request:read"
        )

        assert test_request in permitted_requests
Exemplo n.º 2
0
    def test_user_permitted_objects_returns_permitted_jobs(
        self, user_with_role_assignments, test_garden, test_job
    ):
        permitted_jobs = user_permitted_objects(
            user_with_role_assignments, Job, "job:read"
        )

        assert test_job in permitted_jobs
Exemplo n.º 3
0
    def test_user_permitted_objects_does_not_return_nonpermitted_jobs(
        self, user_with_role_assignments, test_garden, test_job
    ):
        permitted_jobs = user_permitted_objects(
            user_with_role_assignments, Job, "unassigned_permission"
        )

        assert test_job not in permitted_jobs
Exemplo n.º 4
0
    def test_user_permitted_objects_does_not_return_nonpermitted_gardens(
        self, user_with_role_assignments, test_garden
    ):
        permitted_gardens = user_permitted_objects(
            user_with_role_assignments, Garden, "unassigned_permission"
        )

        assert test_garden not in permitted_gardens
Exemplo n.º 5
0
    def test_user_permitted_objects_returns_permitted_gardens_via_global(
        self, user_with_role_assignments, test_garden
    ):
        permitted_gardens = user_permitted_objects(
            user_with_role_assignments, Garden, "garden:create"
        )

        assert test_garden in permitted_gardens
Exemplo n.º 6
0
    def test_user_permitted_objects_does_not_return_nonpermitted_systems(
        self, user_with_role_assignments, test_garden
    ):
        permitted_systems = user_permitted_objects(
            user_with_role_assignments, System, "unassigned_permission"
        )

        assert test_system_1_0_0 not in permitted_systems
        assert test_system_2_0_0 not in permitted_systems
Exemplo n.º 7
0
    def test_user_permitted_objects_returns_permitted_systems(
        self, user_with_role_assignments, test_system_1_0_0, test_system_2_0_0
    ):
        permitted_systems = user_permitted_objects(
            user_with_role_assignments, System, "request:read"
        )

        assert test_system_1_0_0 in permitted_systems
        assert test_system_2_0_0 in permitted_systems
Exemplo n.º 8
0
    def permissioned_queryset(self, model: Type[Document],
                              permission: str) -> QuerySet:
        """Returns a QuerySet for the provided Document model filtered down to only
        the objects for which the requesting user has the given permission

        Args:
            model: The Document model to be filtered
            permission: The required permission that will be used to filter objects

        Returns:
            QuerySet: A QuerySet for model filtered down to objects the requesting user
              has access to.
        """
        return user_permitted_objects(self.current_user, model, permission)