def test_get_out_of_scope_permissions_user_without_permissions( staff_user, permission_manage_orders, permission_manage_users): permissions = [ AccountPermissions.MANAGE_USERS, OrderPermissions.MANAGE_ORDERS ] missing_perms = get_out_of_scope_permissions(staff_user, permissions) assert missing_perms == permissions
def test_get_out_of_scope_permissions_user_does_not_have_all_permissions( staff_user, permission_manage_orders, permission_manage_users): staff_user.user_permissions.add(permission_manage_orders) missing_perms = get_out_of_scope_permissions( staff_user, [AccountPermissions.MANAGE_USERS, OrderPermissions.MANAGE_ORDERS]) assert missing_perms == [AccountPermissions.MANAGE_USERS]
def test_get_out_of_scope_permissions_app_has_all_permissions( app, permission_manage_orders, permission_manage_users): app.permissions.add(permission_manage_orders, permission_manage_users) missing_perms = get_out_of_scope_permissions( app, [AccountPermissions.MANAGE_USERS, OrderPermissions.MANAGE_ORDERS], ) assert missing_perms == []