mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-07-24 18:09:13 -04:00
96c592be10
you can get in with either "manage_templates" or "send_letters" also improve running of a bunch of tests, by parametrising rather than looping and by cleaning up some mock imports
57 lines
1.5 KiB
Python
57 lines
1.5 KiB
Python
import pytest
|
|
from flask import url_for
|
|
|
|
from tests import service_json
|
|
|
|
|
|
@pytest.mark.parametrize('can_send_letters, response_code', [
|
|
(True, 200),
|
|
(False, 403)
|
|
])
|
|
def test_letters_access_restricted(logged_in_client, mocker, can_send_letters, response_code):
|
|
service = service_json(can_send_letters=can_send_letters)
|
|
mocker.patch('app.service_api_client.get_service', return_value={"data": service})
|
|
|
|
response = logged_in_client.get(url_for('main.letters', service_id=service['id']))
|
|
|
|
assert response.status_code == response_code
|
|
|
|
|
|
@pytest.mark.parametrize('permission', [
|
|
'send_letters',
|
|
'manage_templates'
|
|
])
|
|
def test_letters_lets_in_with_permissions(
|
|
client,
|
|
mocker,
|
|
mock_login,
|
|
mock_has_permissions,
|
|
api_user_active,
|
|
permission,
|
|
):
|
|
service = service_json(can_send_letters=True)
|
|
mocker.patch('app.service_api_client.get_service', return_value={"data": service})
|
|
|
|
api_user_active._permissions[str(service['id'])] = [permission]
|
|
|
|
client.login(api_user_active)
|
|
response = client.get(url_for('main.letters', service_id=service['id']))
|
|
|
|
assert response.status_code == 200
|
|
|
|
|
|
def test_letters_rejects_without_permissions(
|
|
client,
|
|
mocker,
|
|
mock_login,
|
|
mock_has_permissions,
|
|
api_user_active,
|
|
):
|
|
service = service_json(can_send_letters=True)
|
|
mocker.patch('app.service_api_client.get_service', return_value={"data": service})
|
|
|
|
client.login(api_user_active)
|
|
response = client.get(url_for('main.letters', service_id=service['id']))
|
|
|
|
assert response.status_code == 200
|