mirror of
https://github.com/hanzoai/sentinel.git
synced 2026-09-29 22:34:33 +00:00
72 lines
2.4 KiB
Python
72 lines
2.4 KiB
Python
from sentry.models.userrole import UserRole
|
|
from sentry.testutils.cases import APITestCase
|
|
from sentry.testutils.silo import control_silo_test
|
|
|
|
|
|
@control_silo_test
|
|
class UserRolesDetailsTest(APITestCase):
|
|
endpoint = "sentry-api-0-userroles-details"
|
|
|
|
def setUp(self):
|
|
super().setUp()
|
|
self.user = self.create_user(is_superuser=True)
|
|
self.login_as(user=self.user, superuser=True)
|
|
self.add_user_permission(self.user, "users.admin")
|
|
|
|
def test_fails_without_superuser(self):
|
|
self.user = self.create_user(is_superuser=False)
|
|
self.login_as(self.user)
|
|
self.create_user_role(name="test-role")
|
|
resp = self.get_response("test-role")
|
|
assert resp.status_code == 403
|
|
|
|
self.user.update(is_superuser=True)
|
|
resp = self.get_response("test-role")
|
|
assert resp.status_code == 403
|
|
|
|
def test_fails_without_users_admin_permission(self):
|
|
self.user = self.create_user(is_superuser=True)
|
|
self.login_as(self.user, superuser=True)
|
|
resp = self.get_response("test-role")
|
|
assert resp.status_code == 403
|
|
|
|
|
|
@control_silo_test
|
|
class UserRolesDetailsGetTest(UserRolesDetailsTest):
|
|
def test_simple(self):
|
|
self.create_user_role(name="test-role")
|
|
self.create_user_role(name="test-role2")
|
|
resp = self.get_response("test-role")
|
|
assert resp.status_code == 200
|
|
assert resp.data["name"] == "test-role"
|
|
|
|
|
|
@control_silo_test
|
|
class UserRolesDetailsPutTest(UserRolesDetailsTest):
|
|
method = "PUT"
|
|
|
|
def test_simple(self):
|
|
role1 = self.create_user_role(name="test-role", permissions=["users.edit"])
|
|
role2 = self.create_user_role(name="test-role2", permissions=["users.edit"])
|
|
resp = self.get_response("test-role", permissions=["users.admin"])
|
|
assert resp.status_code == 200
|
|
|
|
role1 = UserRole.objects.get(id=role1.id)
|
|
assert role1.permissions == ["users.admin"]
|
|
role2 = UserRole.objects.get(id=role2.id)
|
|
assert role2.permissions == ["users.edit"]
|
|
|
|
|
|
@control_silo_test
|
|
class UserRolesDetailsDeleteTest(UserRolesDetailsTest):
|
|
method = "DELETE"
|
|
|
|
def test_simple(self):
|
|
role1 = self.create_user_role(name="test-role")
|
|
role2 = self.create_user_role(name="test-role2")
|
|
resp = self.get_response("test-role")
|
|
assert resp.status_code == 204
|
|
|
|
assert not UserRole.objects.filter(id=role1.id).exists()
|
|
assert UserRole.objects.filter(id=role2.id).exists()
|