def setUp(self):
super(TestCollectionPermissionPolicy, self).setUp()
self.policy = CollectionPermissionPolicy(Document)
def setUp(self):
super(TestCollectionPermissionPolicy, self).setUp()
self.policy = CollectionPermissionPolicy(Document)
class TestCollectionPermissionPolicy(PermissionPolicyTestCase):
def setUp(self):
super(TestCollectionPermissionPolicy, self).setUp()
self.policy = CollectionPermissionPolicy(Document)
def test_user_has_permission(self):
self.assertUserPermissionMatrix([
(self.superuser, True, True, True, True),
(self.inactive_superuser, False, False, False, False),
(self.doc_changer, False, True, False, False),
(self.inactive_doc_changer, False, False, False, False),
(self.report_changer, False, True, False, False),
(self.report_adder, True, False, False, False),
(self.useless_user, False, False, False, False),
(self.anonymous_user, False, False, False, False),
])
def test_user_has_any_permission(self):
self.assertTrue(
self.policy.user_has_any_permission(self.superuser, ['add', 'change'])
)
self.assertFalse(
self.policy.user_has_any_permission(self.inactive_superuser, ['add', 'change'])
)
self.assertTrue(
self.policy.user_has_any_permission(self.report_changer, ['add', 'change'])
)
self.assertTrue(
self.policy.user_has_any_permission(self.report_adder, ['add', 'change'])
)
self.assertFalse(
self.policy.user_has_any_permission(self.anonymous_user, ['add', 'change'])
)
def test_users_with_any_permission(self):
users_with_add_or_change_permission = self.policy.users_with_any_permission(
['add', 'change']
)
self.assertResultSetEqual(users_with_add_or_change_permission, [
self.superuser,
self.doc_changer,
self.report_changer,
self.report_adder,
])
def test_users_with_permission(self):
users_with_change_permission = self.policy.users_with_permission('change')
self.assertResultSetEqual(users_with_change_permission, [
self.superuser,
self.doc_changer,
self.report_changer,
])
users_with_custom_permission = self.policy.users_with_permission('frobnicate')
self.assertResultSetEqual(users_with_custom_permission, [
self.superuser,
])
def test_user_has_permission_for_instance(self):
# document in the root is only editable by users with permissions
# on the root collection
self.assertUserInstancePermissionMatrix(self.changer_doc, [
(self.superuser, True, True, True),
(self.inactive_superuser, False, False, False),
(self.doc_changer, True, False, False),
(self.inactive_doc_changer, False, False, False),
(self.report_changer, False, False, False),
(self.report_adder, False, False, False),
(self.useless_user, False, False, False),
(self.anonymous_user, False, False, False),
])
# document in 'reports' is editable by users with permissions
# on 'reports' or the root collection
self.assertUserInstancePermissionMatrix(self.useless_report, [
(self.superuser, True, True, True),
(self.inactive_superuser, False, False, False),
(self.doc_changer, True, False, False),
(self.inactive_doc_changer, False, False, False),
(self.report_changer, True, False, False),
(self.report_adder, False, False, False),
(self.useless_user, False, False, False),
(self.anonymous_user, False, False, False),
])
def test_user_has_any_permission_for_instance(self):
self.assertTrue(
self.policy.user_has_any_permission_for_instance(
self.report_changer, ['change', 'delete'], self.useless_report
)
)
self.assertFalse(
self.policy.user_has_any_permission_for_instance(
self.report_changer, ['change', 'delete'], self.changer_doc
)
)
self.assertFalse(
self.policy.user_has_any_permission_for_instance(
self.anonymous_user, ['change', 'delete'], self.changer_doc
)
)
def test_instances_user_has_permission_for(self):
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.superuser, 'change',
),
[
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
]
)
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.inactive_superuser, 'change',
),
[]
)
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.doc_changer, 'change',
),
[
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
]
)
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.report_changer, 'change',
),
[
self.changer_report, self.useless_report, self.adder_report,
self.anonymous_report
]
)
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.useless_user, 'change',
),
[]
)
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.anonymous_user, 'change',
),
[]
)
def test_instances_user_has_any_permission_for(self):
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.superuser, ['change', 'delete']
),
[
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
]
)
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.inactive_superuser, ['change', 'delete']
),
[]
)
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.doc_changer, ['change', 'delete']
),
[
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
]
)
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.report_changer, ['change', 'delete']
),
[
self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
]
)
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.useless_user, ['change', 'delete']
),
[]
)
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.anonymous_user, ['change', 'delete']
),
[]
)
def test_users_with_permission_for_instance(self):
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance('change', self.changer_doc),
[
self.superuser, self.doc_changer
]
)
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance('change', self.adder_report),
[
self.superuser, self.doc_changer, self.report_changer
]
)
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance('change', self.changer_report),
[
self.superuser, self.doc_changer, self.report_changer
]
)
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance('change', self.useless_report),
[
self.superuser, self.doc_changer, self.report_changer
]
)
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance('change', self.anonymous_report),
[
self.superuser, self.doc_changer, self.report_changer
]
)
def test_users_with_any_permission_for_instance(self):
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['change', 'delete'], self.changer_doc
),
[
self.superuser, self.doc_changer
]
)
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['change', 'delete'], self.adder_report
),
[
self.superuser, self.doc_changer, self.report_changer
]
)
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['change', 'delete'], self.useless_report
),
[
self.superuser, self.doc_changer, self.report_changer
]
)
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['delete', 'frobnicate'], self.useless_report
),
[self.superuser]
)
def test_collections_user_has_permission_for(self):
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.superuser, 'change',
),
[self.root_collection, self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.inactive_superuser, 'change',
),
[]
)
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.doc_changer, 'change',
),
[self.root_collection, self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.report_changer, 'change',
),
[self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.report_adder, 'change',
),
[]
)
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.report_adder, 'add',
),
[self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.useless_user, 'change',
),
[]
)
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.anonymous_user, 'change',
),
[]
)
def test_collections_user_has_any_permission_for(self):
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.superuser, ['change', 'delete']
),
[self.root_collection, self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.inactive_superuser, ['change', 'delete']
),
[]
)
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.doc_changer, ['change', 'delete']
),
[self.root_collection, self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.report_changer, ['change', 'delete']
),
[self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.report_adder, ['change', 'delete']
),
[]
)
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.report_adder, ['add', 'delete']
),
[self.reports_collection]
)
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.useless_user, ['change', 'delete']
),
[]
)
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.anonymous_user, ['change', 'delete']
),
[]
)
class TestCollectionPermissionPolicy(PermissionPolicyTestCase):
def setUp(self):
super(TestCollectionPermissionPolicy, self).setUp()
self.policy = CollectionPermissionPolicy(Document)
def test_user_has_permission(self):
self.assertUserPermissionMatrix([
(self.superuser, True, True, True, True),
(self.inactive_superuser, False, False, False, False),
(self.doc_changer, False, True, False, False),
(self.inactive_doc_changer, False, False, False, False),
(self.report_changer, False, True, False, False),
(self.report_adder, True, False, False, False),
(self.useless_user, False, False, False, False),
(self.anonymous_user, False, False, False, False),
])
def test_user_has_any_permission(self):
self.assertTrue(
self.policy.user_has_any_permission(self.superuser,
['add', 'change']))
self.assertFalse(
self.policy.user_has_any_permission(self.inactive_superuser,
['add', 'change']))
self.assertTrue(
self.policy.user_has_any_permission(self.report_changer,
['add', 'change']))
self.assertTrue(
self.policy.user_has_any_permission(self.report_adder,
['add', 'change']))
self.assertFalse(
self.policy.user_has_any_permission(self.anonymous_user,
['add', 'change']))
def test_users_with_any_permission(self):
users_with_add_or_change_permission = self.policy.users_with_any_permission(
['add', 'change'])
self.assertResultSetEqual(users_with_add_or_change_permission, [
self.superuser,
self.doc_changer,
self.report_changer,
self.report_adder,
])
def test_users_with_permission(self):
users_with_change_permission = self.policy.users_with_permission(
'change')
self.assertResultSetEqual(users_with_change_permission, [
self.superuser,
self.doc_changer,
self.report_changer,
])
users_with_custom_permission = self.policy.users_with_permission(
'frobnicate')
self.assertResultSetEqual(users_with_custom_permission, [
self.superuser,
])
def test_user_has_permission_for_instance(self):
# document in the root is only editable by users with permissions
# on the root collection
self.assertUserInstancePermissionMatrix(self.changer_doc, [
(self.superuser, True, True, True),
(self.inactive_superuser, False, False, False),
(self.doc_changer, True, False, False),
(self.inactive_doc_changer, False, False, False),
(self.report_changer, False, False, False),
(self.report_adder, False, False, False),
(self.useless_user, False, False, False),
(self.anonymous_user, False, False, False),
])
# document in 'reports' is editable by users with permissions
# on 'reports' or the root collection
self.assertUserInstancePermissionMatrix(self.useless_report, [
(self.superuser, True, True, True),
(self.inactive_superuser, False, False, False),
(self.doc_changer, True, False, False),
(self.inactive_doc_changer, False, False, False),
(self.report_changer, True, False, False),
(self.report_adder, False, False, False),
(self.useless_user, False, False, False),
(self.anonymous_user, False, False, False),
])
def test_user_has_any_permission_for_instance(self):
self.assertTrue(
self.policy.user_has_any_permission_for_instance(
self.report_changer, ['change', 'delete'],
self.useless_report))
self.assertFalse(
self.policy.user_has_any_permission_for_instance(
self.report_changer, ['change', 'delete'], self.changer_doc))
self.assertFalse(
self.policy.user_has_any_permission_for_instance(
self.anonymous_user, ['change', 'delete'], self.changer_doc))
def test_instances_user_has_permission_for(self):
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.superuser,
'change',
), [
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
])
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.inactive_superuser,
'change',
), [])
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.doc_changer,
'change',
), [
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
])
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.report_changer,
'change',
), [
self.changer_report, self.useless_report, self.adder_report,
self.anonymous_report
])
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.useless_user,
'change',
), [])
self.assertResultSetEqual(
self.policy.instances_user_has_permission_for(
self.anonymous_user,
'change',
), [])
def test_instances_user_has_any_permission_for(self):
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.superuser, ['change', 'delete']), [
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
])
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.inactive_superuser, ['change', 'delete']), [])
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.doc_changer, ['change', 'delete']), [
self.changer_doc, self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
])
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.report_changer, ['change', 'delete']), [
self.changer_report, self.adder_report,
self.useless_report, self.anonymous_report
])
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.useless_user, ['change', 'delete']), [])
self.assertResultSetEqual(
self.policy.instances_user_has_any_permission_for(
self.anonymous_user, ['change', 'delete']), [])
def test_users_with_permission_for_instance(self):
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance(
'change', self.changer_doc),
[self.superuser, self.doc_changer])
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance(
'change', self.adder_report),
[self.superuser, self.doc_changer, self.report_changer])
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance(
'change', self.changer_report),
[self.superuser, self.doc_changer, self.report_changer])
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance(
'change', self.useless_report),
[self.superuser, self.doc_changer, self.report_changer])
self.assertResultSetEqual(
self.policy.users_with_permission_for_instance(
'change', self.anonymous_report),
[self.superuser, self.doc_changer, self.report_changer])
def test_users_with_any_permission_for_instance(self):
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['change', 'delete'], self.changer_doc),
[self.superuser, self.doc_changer])
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['change', 'delete'], self.adder_report),
[self.superuser, self.doc_changer, self.report_changer])
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['change', 'delete'], self.useless_report),
[self.superuser, self.doc_changer, self.report_changer])
self.assertResultSetEqual(
self.policy.users_with_any_permission_for_instance(
['delete', 'frobnicate'], self.useless_report),
[self.superuser])
def test_collections_user_has_permission_for(self):
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.superuser,
'change',
), [self.root_collection, self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.inactive_superuser,
'change',
), [])
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.doc_changer,
'change',
), [self.root_collection, self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.report_changer,
'change',
), [self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.report_adder,
'change',
), [])
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.report_adder,
'add',
), [self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.useless_user,
'change',
), [])
self.assertResultSetEqual(
self.policy.collections_user_has_permission_for(
self.anonymous_user,
'change',
), [])
def test_collections_user_has_any_permission_for(self):
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.superuser, ['change', 'delete']),
[self.root_collection, self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.inactive_superuser, ['change', 'delete']), [])
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.doc_changer, ['change', 'delete']),
[self.root_collection, self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.report_changer, ['change', 'delete']),
[self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.report_adder, ['change', 'delete']), [])
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.report_adder, ['add', 'delete']),
[self.reports_collection])
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.useless_user, ['change', 'delete']), [])
self.assertResultSetEqual(
self.policy.collections_user_has_any_permission_for(
self.anonymous_user, ['change', 'delete']), [])
