83 lines
2.7 KiB
Python
83 lines
2.7 KiB
Python
import pytest
|
|
from rest_framework.views import APIView
|
|
|
|
from funkwhale_api.users import permissions
|
|
|
|
|
|
def test_has_user_permission_no_user(api_request):
|
|
view = APIView.as_view()
|
|
permission = permissions.HasUserPermission()
|
|
request = api_request.get('/')
|
|
assert permission.has_permission(request, view) is False
|
|
|
|
|
|
def test_has_user_permission_anonymous(anonymous_user, api_request):
|
|
view = APIView.as_view()
|
|
permission = permissions.HasUserPermission()
|
|
request = api_request.get('/')
|
|
setattr(request, 'user', anonymous_user)
|
|
assert permission.has_permission(request, view) is False
|
|
|
|
|
|
@pytest.mark.parametrize('value', [True, False])
|
|
def test_has_user_permission_logged_in_single(value, factories, api_request):
|
|
user = factories['users.User'](permission_federation=value)
|
|
|
|
class View(APIView):
|
|
required_permissions = ['federation']
|
|
view = View()
|
|
permission = permissions.HasUserPermission()
|
|
request = api_request.get('/')
|
|
setattr(request, 'user', user)
|
|
result = permission.has_permission(request, view)
|
|
assert result == user.has_permissions('federation') == value
|
|
|
|
|
|
@pytest.mark.parametrize('federation,library,expected', [
|
|
(True, False, False),
|
|
(False, True, False),
|
|
(False, False, False),
|
|
(True, True, True),
|
|
])
|
|
def test_has_user_permission_logged_in_multiple_and(
|
|
federation, library, expected, factories, api_request):
|
|
user = factories['users.User'](
|
|
permission_federation=federation,
|
|
permission_library=library,
|
|
)
|
|
|
|
class View(APIView):
|
|
required_permissions = ['federation', 'library']
|
|
permission_operator = 'and'
|
|
view = View()
|
|
permission = permissions.HasUserPermission()
|
|
request = api_request.get('/')
|
|
setattr(request, 'user', user)
|
|
result = permission.has_permission(request, view)
|
|
assert result == user.has_permissions('federation', 'library') == expected
|
|
|
|
|
|
@pytest.mark.parametrize('federation,library,expected', [
|
|
(True, False, True),
|
|
(False, True, True),
|
|
(False, False, False),
|
|
(True, True, True),
|
|
])
|
|
def test_has_user_permission_logged_in_multiple_or(
|
|
federation, library, expected, factories, api_request):
|
|
user = factories['users.User'](
|
|
permission_federation=federation,
|
|
permission_library=library,
|
|
)
|
|
|
|
class View(APIView):
|
|
required_permissions = ['federation', 'library']
|
|
permission_operator = 'or'
|
|
view = View()
|
|
permission = permissions.HasUserPermission()
|
|
request = api_request.get('/')
|
|
setattr(request, 'user', user)
|
|
result = permission.has_permission(request, view)
|
|
assert result == user.has_permissions(
|
|
'federation', 'library', operator='or') == expected
|