mirror of
https://github.com/hanzoai/sentinel.git
synced 2026-09-29 22:34:33 +00:00
37 lines
1.2 KiB
Python
37 lines
1.2 KiB
Python
from sentry.testutils.cases import APITestCase
|
|
from sentry.testutils.helpers.features import with_feature
|
|
|
|
|
|
class SuperuserDataSecrecyTestCase(APITestCase):
|
|
endpoint = "sentry-api-0-organization-details"
|
|
method = "get"
|
|
|
|
def setUp(self):
|
|
super().setUp()
|
|
self.login_as(self.user)
|
|
|
|
@with_feature("organizations:enterprise-data-secrecy")
|
|
def test_superuser_no_access(self):
|
|
"""
|
|
Please contact the Enterprise team if your code change causes this test to fail
|
|
"""
|
|
superuser = self.create_user(is_superuser=True)
|
|
self.login_as(superuser, superuser=True)
|
|
|
|
# superuser cannot access orgs with data secrecy
|
|
self.get_error_response(self.organization.slug, status_code=401)
|
|
|
|
def test_superuser_has_access(self):
|
|
superuser = self.create_user(is_superuser=True)
|
|
self.login_as(superuser, superuser=True)
|
|
|
|
# superuser can access orgs without data secrecy
|
|
self.get_success_response(self.organization.slug)
|
|
|
|
def test_non_member_no_access(self):
|
|
self.login_as(self.create_user())
|
|
self.get_error_response(self.organization.slug, status_code=403)
|
|
|
|
def test_member_has_access(self):
|
|
self.get_success_response(self.organization.slug)
|