220 lines
7.3 KiB
Python
220 lines
7.3 KiB
Python
from flask import url_for
|
|
|
|
from tests.factories import UserFactory, WorkspaceFactory, WorkspaceRoleFactory
|
|
from atst.domain.workspaces import Workspaces
|
|
from atst.domain.workspace_roles import WorkspaceRoles
|
|
from atst.domain.projects import Projects
|
|
from atst.domain.environments import Environments
|
|
from atst.domain.environment_roles import EnvironmentRoles
|
|
from atst.queue import queue
|
|
|
|
|
|
def test_user_with_permission_has_add_member_link(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user_session(workspace.owner)
|
|
response = client.get("/workspaces/{}/members".format(workspace.id))
|
|
assert (
|
|
'href="/workspaces/{}/members/new"'.format(workspace.id).encode()
|
|
in response.data
|
|
)
|
|
|
|
|
|
def test_user_without_permission_has_no_add_member_link(client, user_session):
|
|
user = UserFactory.create()
|
|
workspace = WorkspaceFactory.create()
|
|
Workspaces._create_workspace_role(user, workspace, "developer")
|
|
user_session(user)
|
|
response = client.get("/workspaces/{}/members".format(workspace.id))
|
|
assert (
|
|
'href="/workspaces/{}/members/new"'.format(workspace.id).encode()
|
|
not in response.data
|
|
)
|
|
|
|
|
|
def test_permissions_for_view_member(client, user_session):
|
|
user = UserFactory.create()
|
|
workspace = WorkspaceFactory.create()
|
|
Workspaces._create_workspace_role(user, workspace, "developer")
|
|
member = WorkspaceRoles.add(user, workspace.id, "developer")
|
|
user_session(user)
|
|
response = client.get(
|
|
url_for("workspaces.view_member", workspace_id=workspace.id, member_id=user.id)
|
|
)
|
|
assert response.status_code == 404
|
|
|
|
|
|
def test_create_member(client, user_session):
|
|
user = UserFactory.create()
|
|
workspace = WorkspaceFactory.create()
|
|
user_session(workspace.owner)
|
|
queue_length = len(queue.get_queue())
|
|
|
|
response = client.post(
|
|
url_for("workspaces.create_member", workspace_id=workspace.id),
|
|
data={
|
|
"dod_id": user.dod_id,
|
|
"first_name": "Wilbur",
|
|
"last_name": "Zuckerman",
|
|
"email": "some_pig@zuckermans.com",
|
|
"workspace_role": "developer",
|
|
},
|
|
follow_redirects=True,
|
|
)
|
|
|
|
assert response.status_code == 200
|
|
assert user.has_workspaces
|
|
assert user.invitations
|
|
assert len(queue.get_queue()) == queue_length + 1
|
|
|
|
|
|
def test_view_member_shows_role(client, user_session):
|
|
user = UserFactory.create()
|
|
workspace = WorkspaceFactory.create()
|
|
Workspaces._create_workspace_role(user, workspace, "developer")
|
|
member = WorkspaceRoles.add(user, workspace.id, "developer")
|
|
user_session(workspace.owner)
|
|
response = client.get(
|
|
url_for("workspaces.view_member", workspace_id=workspace.id, member_id=user.id)
|
|
)
|
|
assert response.status_code == 200
|
|
assert "initial-choice='developer'".encode() in response.data
|
|
|
|
|
|
def test_update_member_workspace_role(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user = UserFactory.create()
|
|
member = WorkspaceRoles.add(user, workspace.id, "developer")
|
|
user_session(workspace.owner)
|
|
response = client.post(
|
|
url_for(
|
|
"workspaces.update_member", workspace_id=workspace.id, member_id=user.id
|
|
),
|
|
data={"workspace_role": "security_auditor"},
|
|
follow_redirects=True,
|
|
)
|
|
assert response.status_code == 200
|
|
assert member.role_name == "security_auditor"
|
|
|
|
|
|
def test_update_member_workspace_role_with_no_data(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user = UserFactory.create()
|
|
member = WorkspaceRoles.add(user, workspace.id, "developer")
|
|
user_session(workspace.owner)
|
|
response = client.post(
|
|
url_for(
|
|
"workspaces.update_member", workspace_id=workspace.id, member_id=user.id
|
|
),
|
|
data={},
|
|
follow_redirects=True,
|
|
)
|
|
assert response.status_code == 200
|
|
assert member.role_name == "developer"
|
|
|
|
|
|
def test_update_member_environment_role(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user = UserFactory.create()
|
|
member = WorkspaceRoles.add(user, workspace.id, "developer")
|
|
project = Projects.create(
|
|
workspace.owner,
|
|
workspace,
|
|
"Snazzy Project",
|
|
"A new project for me and my friends",
|
|
{"env1", "env2"},
|
|
)
|
|
env1_id = project.environments[0].id
|
|
env2_id = project.environments[1].id
|
|
for env in project.environments:
|
|
Environments.add_member(env, user, "developer")
|
|
user_session(workspace.owner)
|
|
response = client.post(
|
|
url_for(
|
|
"workspaces.update_member", workspace_id=workspace.id, member_id=user.id
|
|
),
|
|
data={
|
|
"workspace_role": "developer",
|
|
"env_" + str(env1_id): "security_auditor",
|
|
"env_" + str(env2_id): "devops",
|
|
},
|
|
follow_redirects=True,
|
|
)
|
|
assert response.status_code == 200
|
|
assert EnvironmentRoles.get(user.id, env1_id).role == "security_auditor"
|
|
assert EnvironmentRoles.get(user.id, env2_id).role == "devops"
|
|
|
|
|
|
def test_update_member_environment_role_with_no_data(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user = UserFactory.create()
|
|
member = WorkspaceRoles.add(user, workspace.id, "developer")
|
|
project = Projects.create(
|
|
workspace.owner,
|
|
workspace,
|
|
"Snazzy Project",
|
|
"A new project for me and my friends",
|
|
{"env1"},
|
|
)
|
|
env1_id = project.environments[0].id
|
|
for env in project.environments:
|
|
Environments.add_member(env, user, "developer")
|
|
user_session(workspace.owner)
|
|
response = client.post(
|
|
url_for(
|
|
"workspaces.update_member", workspace_id=workspace.id, member_id=user.id
|
|
),
|
|
data={"env_" + str(env1_id): None, "env_" + str(env1_id): ""},
|
|
follow_redirects=True,
|
|
)
|
|
assert response.status_code == 200
|
|
assert EnvironmentRoles.get(user.id, env1_id).role == "developer"
|
|
|
|
|
|
def test_revoke_member_access(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user = UserFactory.create()
|
|
member = WorkspaceRoles.add(user, workspace.id, "developer")
|
|
Projects.create(
|
|
workspace.owner,
|
|
workspace,
|
|
"Snazzy Project",
|
|
"A new project for me and my friends",
|
|
{"env1"},
|
|
)
|
|
user_session(workspace.owner)
|
|
response = client.post(
|
|
url_for(
|
|
"workspaces.revoke_access", workspace_id=workspace.id, member_id=member.id
|
|
)
|
|
)
|
|
assert response.status_code == 302
|
|
assert WorkspaceRoles.get_by_id(member.id).num_environment_roles == 0
|
|
|
|
|
|
def test_shows_revoke_button(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user = UserFactory.create()
|
|
member = WorkspaceRoleFactory.create(user=user, workspace=workspace)
|
|
user_session(workspace.owner)
|
|
response = client.get(
|
|
url_for(
|
|
"workspaces.view_member",
|
|
workspace_id=workspace.id,
|
|
member_id=member.user.id,
|
|
)
|
|
)
|
|
assert "Remove Workspace Access" in response.data.decode()
|
|
|
|
|
|
def test_does_not_show_revoke_button(client, user_session):
|
|
workspace = WorkspaceFactory.create()
|
|
user_session(workspace.owner)
|
|
response = client.get(
|
|
url_for(
|
|
"workspaces.view_member",
|
|
workspace_id=workspace.id,
|
|
member_id=workspace.owner.id,
|
|
)
|
|
)
|
|
assert "Remove Workspace Access" not in response.data.decode()
|