darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-02-05 10:53:28 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #325 from alphagov/view_only_team_members

Browse Source 
View only team members
This commit is contained in:
Chris Hill-Scott
2016-03-22 15:53:02 +00:00
parent 0449a0bd4b 42eac5c359
commit bb168c5e8d
5 changed files with 38 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
tests/app/main/views/test_dashboard.py
View File

@@ -57,7 +57,7 @@ def test_menu_send_messages(mocker, app_, api_user_active, service_one, mock_get
service_id=service_one['id'],
template_type='sms')in page
assert url_for('main.manage_users', service_id=service_one['id']) not in page
assert url_for('main.manage_users', service_id=service_one['id']) in page
assert url_for('main.service_settings', service_id=service_one['id']) not in page
assert url_for('main.api_keys', service_id=service_one['id']) not in page
@@ -108,7 +108,7 @@ def test_menu_manage_api_keys(mocker, app_, api_user_active, service_one, mock_g
service_id=service_one['id'],
template_type='sms') in page
assert url_for('main.manage_users', service_id=service_one['id']) not in page
assert url_for('main.manage_users', service_id=service_one['id']) in page
assert url_for('main.service_settings', service_id=service_one['id']) not in page
assert url_for('main.show_all_services') not in page

18
tests/app/main/views/test_manage_users.py
View File

@@ -278,3 +278,21 @@ def test_user_cant_invite_themselves(
assert page.h1.string.strip() == 'Invite a team member'
form_error = page.find('span', class_='error-message').string.strip()
assert form_error == "You can't send an invitation to yourself"
def test_no_permission_manage_users_page(app_,
service_one,
api_user_active,
mock_login,
mock_get_user,
mock_get_service,
mock_get_users_by_service,
mock_get_invites_for_service):
with app_.test_request_context():
with app_.test_client() as client:
client.login(api_user_active)
response = client.get(url_for('main.manage_users', service_id=service_one['id']))
resp_text = response.get_data(as_text=True)
assert url_for('.invite_user', service_id=service_one['id']) not in resp_text
assert "Edit permission" not in resp_text
assert "Manage team" not in resp_text