darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-02-01 15:46:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

Always keep view_activity permissions for broadcast users

Browse Source 
We made a change to remove all permissions from users and invited users
when the broadcast service settings form is submitted
(https://github.com/alphagov/notifications-api/pull/3284). However, when the
form is submitted, notifications-admin always adds the `view_activity`
permission even if no permission boxes are ticked, so we don't want to
remove that one permission
(256c840b46/app/main/forms.py (L1042))
This commit is contained in:
Katie Smith
2021-07-14 14:04:24 +01:00
parent d781da2981
commit 0c7982fd84
2 changed files with 14 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
tests/app/service/test_rest.py
View File

@@ -4162,9 +4162,11 @@ def test_set_as_broadcast_service_removes_user_permissions(
}
)
# The user permissions for the broadcast service get removed
assert len(service_user.get_permissions(service_id=sample_service.id)) == 0
# Permissions for users invited to the broadcast service get removed
assert sample_invited_user.permissions == ''
# The user permissions for the broadcast service (apart from 'view_activity') get removed
assert service_user.get_permissions(service_id=sample_service.id) == ['view_activity']
# Permissions for users invited to the broadcast service (apart from 'view_activity') get removed
assert sample_invited_user.permissions == 'view_activity'
# Permissions for other services remain
assert len(service_user.get_permissions(service_id=sample_service_full_permissions.id)) == 1
assert service_user.get_permissions(service_id=sample_service_full_permissions.id) == ['send_emails']