def test_logging_audit_event_on_update(mock_logger):
user = UserFactory.create()
assert "Audit Event create" in mock_logger.messages
Users.update(user, {"first_name": "Greedo"})
assert "Audit Event update" in mock_logger.messages
assert len(mock_logger.messages) == 2
event_log = mock_logger.extras[1]["audit_event"]
assert event_log["resource_type"] == "user"
assert event_log["resource_id"] == str(user.id)
assert event_log["display_name"] == user.full_name
assert event_log["action"] == "update"
assert "update" in mock_logger.extras[1]["tags"]
def update_user():
user = g.current_user
form = EditUserForm(http_request.form)
next_url = http_request.args.get("next")
if form.validate():
Users.update(user, form.data)
flash("user_updated")
if next_url:
return redirect(next_url)
return render_template(
"user/edit.html",
form=form,
user=user,
next=next_url,
mindate=(dt.datetime.now() - dt.timedelta(days=365)),
maxdate=dt.datetime.now(),
)
def test_update_user_with_dod_id():
new_user = UserFactory.create()
with pytest.raises(UnauthorizedError) as excinfo:
Users.update(new_user, {"dod_id": "1234567890"})
assert "dod_id" in str(excinfo.value)
def test_update_user():
new_user = UserFactory.create()
updated_user = Users.update(new_user, {"first_name": "Jabba"})
assert updated_user.first_name == "Jabba"
