147 lines
4.5 KiB
Python
147 lines
4.5 KiB
Python
from types import SimpleNamespace
|
|
|
|
from django.test import TestCase
|
|
|
|
from apps.users.models import User
|
|
from apps.workspaces.api.permissions import (
|
|
CanWorkspaceManageMembers,
|
|
IsWorkspaceAdmin,
|
|
IsWorkspaceMember,
|
|
IsWorkspaceOwner,
|
|
)
|
|
from apps.workspaces.models import Workspace, WorkspaceMembership
|
|
|
|
|
|
class WorkspacePermissionTests(TestCase):
|
|
@classmethod
|
|
def setUpTestData(cls):
|
|
cls.owner = User.objects.create_user(mobile="09127770021", password="secret123")
|
|
cls.admin = User.objects.create_user(mobile="09127770022", password="secret123")
|
|
cls.member = User.objects.create_user(mobile="09127770023", password="secret123")
|
|
cls.guest = User.objects.create_user(mobile="09127770024", password="secret123")
|
|
cls.outsider = User.objects.create_user(mobile="09127770025", password="secret123")
|
|
|
|
cls.workspace = Workspace.objects.create(name="Workspace Perms", owner=cls.owner)
|
|
cls.admin_membership = WorkspaceMembership.objects.create(
|
|
workspace=cls.workspace,
|
|
user=cls.admin,
|
|
role=WorkspaceMembership.Role.ADMIN,
|
|
is_active=True,
|
|
)
|
|
cls.member_membership = WorkspaceMembership.objects.create(
|
|
workspace=cls.workspace,
|
|
user=cls.member,
|
|
role=WorkspaceMembership.Role.MEMBER,
|
|
is_active=True,
|
|
)
|
|
cls.guest_membership = WorkspaceMembership.objects.create(
|
|
workspace=cls.workspace,
|
|
user=cls.guest,
|
|
role=WorkspaceMembership.Role.GUEST,
|
|
is_active=True,
|
|
)
|
|
cls.workspace_note = SimpleNamespace(workspace=cls.workspace)
|
|
|
|
def _request_for(self, user):
|
|
return SimpleNamespace(user=user)
|
|
|
|
def test_is_workspace_owner_handles_workspace_and_membership_objects(self):
|
|
permission = IsWorkspaceOwner()
|
|
|
|
self.assertTrue(
|
|
permission.has_object_permission(
|
|
self._request_for(self.owner),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
self.assertTrue(
|
|
permission.has_object_permission(
|
|
self._request_for(self.owner),
|
|
None,
|
|
self.admin_membership,
|
|
)
|
|
)
|
|
self.assertFalse(
|
|
permission.has_object_permission(
|
|
self._request_for(self.admin),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
|
|
def test_is_workspace_admin_accepts_workspace_related_objects(self):
|
|
permission = IsWorkspaceAdmin()
|
|
|
|
self.assertTrue(
|
|
permission.has_object_permission(
|
|
self._request_for(self.admin),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
self.assertTrue(
|
|
permission.has_object_permission(
|
|
self._request_for(self.admin),
|
|
None,
|
|
self.workspace_note,
|
|
)
|
|
)
|
|
self.assertFalse(
|
|
permission.has_object_permission(
|
|
self._request_for(self.member),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
|
|
def test_is_workspace_member_allows_active_guest_but_not_outsider(self):
|
|
permission = IsWorkspaceMember()
|
|
|
|
self.assertTrue(
|
|
permission.has_object_permission(
|
|
self._request_for(self.guest),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
self.assertFalse(
|
|
permission.has_object_permission(
|
|
self._request_for(self.outsider),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
|
|
def test_can_workspace_manage_members_only_allows_owner_and_admin(self):
|
|
permission = CanWorkspaceManageMembers()
|
|
|
|
self.assertTrue(
|
|
permission.has_object_permission(
|
|
self._request_for(self.owner),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
self.assertTrue(
|
|
permission.has_object_permission(
|
|
self._request_for(self.admin),
|
|
None,
|
|
self.admin_membership,
|
|
)
|
|
)
|
|
self.assertFalse(
|
|
permission.has_object_permission(
|
|
self._request_for(self.member),
|
|
None,
|
|
self.workspace,
|
|
)
|
|
)
|
|
self.assertFalse(
|
|
permission.has_object_permission(
|
|
self._request_for(self.owner),
|
|
None,
|
|
object(),
|
|
)
|
|
)
|