def test_notification_access_org_admin(notification, org_admin): access = NotificationAccess(org_admin) assert access.can_read(notification) assert access.can_delete(notification)
def test_notification_access_org_auditor(notification, org_auditor): access = NotificationAccess(org_auditor) assert access.can_read(notification) assert not access.can_delete(notification)
def test_notification_access_system_admin(notification, admin): access = NotificationAccess(admin) assert access.can_read(notification) assert access.can_delete(notification)