add access tests for all access-protected routes
- cleans up skipped access tests in domain tests - cleans up other skipped tests that are no longer relevant
This commit is contained in:
@@ -39,54 +39,6 @@ def test_user_without_permission_has_no_budget_report_link(client, user_session)
|
||||
)
|
||||
|
||||
|
||||
@pytest.mark.skip(reason="Temporarily no add activity log link")
|
||||
def test_user_with_permission_has_activity_log_link(client, user_session):
|
||||
portfolio = PortfolioFactory.create()
|
||||
ccpo = UserFactory.create_ccpo()
|
||||
admin = UserFactory.create()
|
||||
PortfolioRoleFactory.create(
|
||||
portfolio=portfolio, user=admin, status=PortfolioRoleStatus.ACTIVE
|
||||
)
|
||||
|
||||
user_session(portfolio.owner)
|
||||
response = client.get("/portfolios/{}/applications".format(portfolio.id))
|
||||
assert (
|
||||
'href="/portfolios/{}/activity"'.format(portfolio.id).encode() in response.data
|
||||
)
|
||||
|
||||
# logs out previous user before creating a new session
|
||||
user_session(admin)
|
||||
response = client.get("/portfolios/{}/applications".format(portfolio.id))
|
||||
assert (
|
||||
'href="/portfolios/{}/activity"'.format(portfolio.id).encode() in response.data
|
||||
)
|
||||
|
||||
user_session(ccpo)
|
||||
response = client.get("/portfolios/{}/applications".format(portfolio.id))
|
||||
assert (
|
||||
'href="/portfolios/{}/activity"'.format(portfolio.id).encode() in response.data
|
||||
)
|
||||
|
||||
|
||||
@pytest.mark.skip(reason="Temporarily no add activity log link")
|
||||
def test_user_without_permission_has_no_activity_log_link(client, user_session):
|
||||
portfolio = PortfolioFactory.create()
|
||||
developer = UserFactory.create()
|
||||
PortfolioRoleFactory.create(
|
||||
portfolio=portfolio,
|
||||
user=developer,
|
||||
role=Roles.get("developer"),
|
||||
status=PortfolioRoleStatus.ACTIVE,
|
||||
)
|
||||
|
||||
user_session(developer)
|
||||
response = client.get("/portfolios/{}/applications".format(portfolio.id))
|
||||
assert (
|
||||
'href="/portfolios/{}/activity"'.format(portfolio.id).encode()
|
||||
not in response.data
|
||||
)
|
||||
|
||||
|
||||
def test_user_with_permission_has_add_application_link(client, user_session):
|
||||
portfolio = PortfolioFactory.create()
|
||||
user_session(portfolio.owner)
|
||||
|
Reference in New Issue
Block a user