from flask import url_for from tests.factories import UserFactory, WorkspaceFactory, WorkspaceRoleFactory from atst.domain.workspaces import Workspaces from atst.domain.workspace_roles import WorkspaceRoles from atst.domain.projects import Projects from atst.domain.environments import Environments from atst.domain.environment_roles import EnvironmentRoles from atst.queue import queue def test_user_with_permission_has_add_member_link(client, user_session): workspace = WorkspaceFactory.create() user_session(workspace.owner) response = client.get("/workspaces/{}/members".format(workspace.id)) assert ( 'href="/workspaces/{}/members/new"'.format(workspace.id).encode() in response.data ) def test_user_without_permission_has_no_add_member_link(client, user_session): user = UserFactory.create() workspace = WorkspaceFactory.create() Workspaces._create_workspace_role(user, workspace, "developer") user_session(user) response = client.get("/workspaces/{}/members".format(workspace.id)) assert ( 'href="/workspaces/{}/members/new"'.format(workspace.id).encode() not in response.data ) def test_permissions_for_view_member(client, user_session): user = UserFactory.create() workspace = WorkspaceFactory.create() Workspaces._create_workspace_role(user, workspace, "developer") member = WorkspaceRoles.add(user, workspace.id, "developer") user_session(user) response = client.get( url_for("workspaces.view_member", workspace_id=workspace.id, member_id=user.id) ) assert response.status_code == 404 def test_create_member(client, user_session): user = UserFactory.create() workspace = WorkspaceFactory.create() user_session(workspace.owner) queue_length = len(queue.get_queue()) response = client.post( url_for("workspaces.create_member", workspace_id=workspace.id), data={ "dod_id": user.dod_id, "first_name": "Wilbur", "last_name": "Zuckerman", "email": "some_pig@zuckermans.com", "workspace_role": "developer", }, follow_redirects=True, ) assert response.status_code == 200 assert user.has_workspaces assert user.invitations assert len(queue.get_queue()) == queue_length + 1 def test_view_member_shows_role(client, user_session): user = UserFactory.create() workspace = WorkspaceFactory.create() Workspaces._create_workspace_role(user, workspace, "developer") member = WorkspaceRoles.add(user, workspace.id, "developer") user_session(workspace.owner) response = client.get( url_for("workspaces.view_member", workspace_id=workspace.id, member_id=user.id) ) assert response.status_code == 200 assert "initial-choice='developer'".encode() in response.data def test_update_member_workspace_role(client, user_session): workspace = WorkspaceFactory.create() user = UserFactory.create() member = WorkspaceRoles.add(user, workspace.id, "developer") user_session(workspace.owner) response = client.post( url_for( "workspaces.update_member", workspace_id=workspace.id, member_id=user.id ), data={"workspace_role": "security_auditor"}, follow_redirects=True, ) assert response.status_code == 200 assert member.role_name == "security_auditor" def test_update_member_workspace_role_with_no_data(client, user_session): workspace = WorkspaceFactory.create() user = UserFactory.create() member = WorkspaceRoles.add(user, workspace.id, "developer") user_session(workspace.owner) response = client.post( url_for( "workspaces.update_member", workspace_id=workspace.id, member_id=user.id ), data={}, follow_redirects=True, ) assert response.status_code == 200 assert member.role_name == "developer" def test_update_member_environment_role(client, user_session): workspace = WorkspaceFactory.create() user = UserFactory.create() member = WorkspaceRoles.add(user, workspace.id, "developer") project = Projects.create( workspace.owner, workspace, "Snazzy Project", "A new project for me and my friends", {"env1", "env2"}, ) env1_id = project.environments[0].id env2_id = project.environments[1].id for env in project.environments: Environments.add_member(env, user, "developer") user_session(workspace.owner) response = client.post( url_for( "workspaces.update_member", workspace_id=workspace.id, member_id=user.id ), data={ "workspace_role": "developer", "env_" + str(env1_id): "security_auditor", "env_" + str(env2_id): "devops", }, follow_redirects=True, ) assert response.status_code == 200 assert EnvironmentRoles.get(user.id, env1_id).role == "security_auditor" assert EnvironmentRoles.get(user.id, env2_id).role == "devops" def test_update_member_environment_role_with_no_data(client, user_session): workspace = WorkspaceFactory.create() user = UserFactory.create() member = WorkspaceRoles.add(user, workspace.id, "developer") project = Projects.create( workspace.owner, workspace, "Snazzy Project", "A new project for me and my friends", {"env1"}, ) env1_id = project.environments[0].id for env in project.environments: Environments.add_member(env, user, "developer") user_session(workspace.owner) response = client.post( url_for( "workspaces.update_member", workspace_id=workspace.id, member_id=user.id ), data={"env_" + str(env1_id): None, "env_" + str(env1_id): ""}, follow_redirects=True, ) assert response.status_code == 200 assert EnvironmentRoles.get(user.id, env1_id).role == "developer" def test_revoke_member_access(client, user_session): workspace = WorkspaceFactory.create() user = UserFactory.create() member = WorkspaceRoles.add(user, workspace.id, "developer") Projects.create( workspace.owner, workspace, "Snazzy Project", "A new project for me and my friends", {"env1"}, ) user_session(workspace.owner) response = client.post( url_for( "workspaces.revoke_access", workspace_id=workspace.id, member_id=member.id ) ) assert response.status_code == 302 assert WorkspaceRoles.get_by_id(member.id).num_environment_roles == 0 def test_shows_revoke_button(client, user_session): workspace = WorkspaceFactory.create() user = UserFactory.create() member = WorkspaceRoleFactory.create(user=user, workspace=workspace) user_session(workspace.owner) response = client.get( url_for( "workspaces.view_member", workspace_id=workspace.id, member_id=member.user.id, ) ) assert "Remove Workspace Access" in response.data.decode() def test_does_not_show_revoke_button(client, user_session): workspace = WorkspaceFactory.create() user_session(workspace.owner) response = client.get( url_for( "workspaces.view_member", workspace_id=workspace.id, member_id=workspace.owner.id, ) ) assert "Remove Workspace Access" not in response.data.decode()