def test_validate_viewable_entity_allowed(self):
user = self.login(is_superuser=False)
a = FakeContact.objects.create(last_name='Doe',
first_name='John',
user=self.other_user)
# view permission set for all entities
self._set_user_credentials(user, EntityCredentials.VIEW,
SetCredentials.ESET_ALL)
with self.assertNoException():
validators.validate_viewable_entity(a, user)
def test_validate_viewable_entity_notallowed_other(self):
user = self.login(is_superuser=False)
a = FakeContact.objects.create(last_name='Doe',
first_name='John',
user=self.other_user)
self._set_user_credentials(user, EntityCredentials.VIEW,
SetCredentials.ESET_OWN)
# view permission set for owned entities
with self.assertRaises(ValidationError) as e:
validators.validate_viewable_entity(a, user)
self.assertEqual(e.exception.code, 'viewnotallowed')
def test_validate_viewable_entity_anonymous(self):
other_user = CremeUser.objects.create(username='******')
a = FakeContact.objects.create(last_name='Doe',
first_name='John',
user=other_user)
user = get_user(self.client)
self.assertTrue(user.is_anonymous)
with self.assertRaises(ValidationError) as e:
validators.validate_viewable_entity(a, user)
self.assertEqual(
e.exception.message,
_('Not authenticated user is not allowed to view entities'))
self.assertEqual(e.exception.code, 'viewnotallowed')
