Skip to content

Commit

Permalink
test: Updated policies in workspace/group tests
Browse files Browse the repository at this point in the history 
Updated tests to accomodate workspace/group route changes to get/update policies
  • Loading branch information
@mike-pisman
mike-pisman committed Oct 15, 2023
1 parent 3404c17 commit b65dc01
Show file tree
Hide file tree
Showing 2 changed files with 62 additions and 42 deletions.
50 changes: 33 additions & 17 deletions tests/test_2_workspaces.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -242,25 +242,30 @@ async def test_get_workspace_members(client_test: AsyncClient):

async def test_get_permissions(client_test: AsyncClient):
print("\n")
colored_dbg.test_info("Getting list of member permissions in workspace [GET /workspaces/{workspace.id}/policy]")
colored_dbg.test_info("Getting list of member permissions in workspace" +
"[GET /workspaces/{workspace.id}/policies?account_id={account_id}]")
workspace = workspaces[0]
active_user = accounts[0]

# Check permission of the user who created the workspace
response = await client_test.get(f"/workspaces/{workspace.id}/policy",
headers={"Authorization": f"Bearer {active_user.token}"})
response = await client_test.get(f"/workspaces/{workspace.id}/policies",
headers={"Authorization": f"Bearer {active_user.token}"},
params={"account_id": str(active_user.id)})
assert response.status_code == status.HTTP_200_OK
response = response.json()
# Creator of the workspace should have all permissions
assert response["permissions"] == Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|") # type: ignore

policy = response['policies'][0]
assert policy["permissions"] == Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|") # type: ignore

# Check permission of the rest of the members
for i in range(1, len(accounts)):
response = await client_test.get(f"/workspaces/{workspace.id}/policy",
response = await client_test.get(f"/workspaces/{workspace.id}/policies",
params={"account_id": accounts[i].id}, # type: ignore
headers={"Authorization": f"Bearer {active_user.token}"})
response = response.json()
assert response["permissions"] == Permissions.WORKSPACE_BASIC_PERMISSIONS.name.split("|") # type: ignore
policy = response['policies'][0]
assert policy["permissions"] == Permissions.WORKSPACE_BASIC_PERMISSIONS.name.split("|") # type: ignore
colored_dbg.test_success("All members have the correct permissions")


Expand Down Expand Up @@ -340,12 +345,13 @@ async def test_permissions(client_test: AsyncClient):
assert res.status_code == status.HTTP_403_FORBIDDEN

# Try to get workspace permissions
res = await client_test.get(f"/workspaces/{workspace.id}/policy", headers=headers)
res = await client_test.get(f"/workspaces/{workspace.id}/policies", headers=headers)
# assert res.status_code == status.HTTP_403_FORBIDDEN
assert res.status_code == status.HTTP_200_OK
policy = res.json()["policies"][0]

# Try to set workspace permissions
res = await client_test.put(f"/workspaces/{workspace.id}/policy",
# # Try to set workspace permissions
res = await client_test.put(f"/workspaces/{workspace.id}/policies/{policy['id']}",
json={"permissions": Permissions.WORKSPACE_BASIC_PERMISSIONS.name.split("|")},
headers=headers)
assert res.status_code == status.HTTP_403_FORBIDDEN
Expand All @@ -357,32 +363,42 @@ async def test_permissions(client_test: AsyncClient):

async def test_set_permissions(client_test: AsyncClient):
print("\n")
colored_dbg.test_info("Setting permissions of workspace members [PUT /workspaces/{workspace.id}/policy]")
colored_dbg.test_info("Setting permissions of members [PUT /workspaces/{workspace.id}/policy/{policy_id}]")
active_user = accounts[0]
workspace = workspaces[0]

# Get policy of another member
response = await client_test.get(f"/workspaces/{workspace.id}/policies",
params={"account_id": str(accounts[1].id)},
headers={"Authorization": f"Bearer {active_user.token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
policy = response["policies"][0]

# Update policy of another member
response = await client_test.put(f"/workspaces/{workspace.id}/policy?",
json={"account_id": accounts[1].id,
"permissions": Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|")},
response = await client_test.put(f"/workspaces/{workspace.id}/policies/{policy['id']}",
json={"permissions": Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|")},
headers={"Authorization": f"Bearer {active_user.token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
assert response["permissions"] == Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|")

# Check permissions
response = await client_test.get(f"/workspaces/{workspace.id}/policy?account_id={accounts[1].id}",
response = await client_test.get(f"/workspaces/{workspace.id}/policies",
params={"account_id": str(accounts[1].id)},
headers={"Authorization": f"Bearer {active_user.token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
assert response["permissions"] == Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|")
policy = response["policies"][0]
assert policy["permissions"] == Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|")

# Now the member should be able to get their policy information
response = await client_test.get(f"/workspaces/{workspace.id}/policy",
response = await client_test.get(f"/workspaces/{workspace.id}/policies",
headers={"Authorization": f"Bearer {accounts[1].token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
assert response["permissions"] == Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|")
policy = response["policies"][0]
assert policy["permissions"] == Permissions.WORKSPACE_ALL_PERMISSIONS.name.split("|")

colored_dbg.test_success("All members have the correct permissions")

Expand Down
54 changes: 29 additions & 25 deletions tests/test_3_groups.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -261,26 +261,29 @@ async def test_get_group_members(client_test: AsyncClient):

async def test_get_policy(client_test: AsyncClient):
print("\n")
colored_dbg.test_info("Getting list of member permissions in group [GET /groups/{group.id}/policy]")
colored_dbg.test_info("Getting list of member permissions in group [GET /groups/{group.id}/policies]")
group = groups[0]
active_user = accounts[0]

# Check permission of the user who created the group
response = await client_test.get(f"/groups/{group.id}/policy",
response = await client_test.get(f"/groups/{group.id}/policies",
params={"account_id": str(active_user.id)},
headers={"Authorization": f"Bearer {active_user.token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
policy = response["policies"][0]
# Creator of the group should have all permissions
assert response["permissions"] == Permissions.GROUP_ALL_PERMISSIONS.name.split("|") # type: ignore
assert policy["permissions"] == Permissions.GROUP_ALL_PERMISSIONS.name.split("|") # type: ignore

# Check permission of the rest of the members
students = accounts[1:10]
for account in students:
response = await client_test.get(f"/groups/{group.id}/policy",
response = await client_test.get(f"/groups/{group.id}/policies",
params={"account_id": account.id}, # type: ignore
headers={"Authorization": f"Bearer {active_user.token}"})
response = response.json()
assert response["permissions"] == Permissions.GROUP_BASIC_PERMISSIONS.name.split("|") # type: ignore
policy = response["policies"][0]
assert policy["permissions"] == Permissions.GROUP_BASIC_PERMISSIONS.name.split("|") # type: ignore
colored_dbg.test_success("All members have the correct permissions")


Expand Down Expand Up @@ -342,27 +345,18 @@ async def test_permissions(client_test: AsyncClient):
headers=headers)
assert res.status_code == status.HTTP_403_FORBIDDEN

# # Try to get group list
# res = await client_test.get(f"/groups/{group.id}/groups", headers=headers)
# assert res.status_code == status.HTTP_403_FORBIDDEN

# # Try to create group
# res = await client_test.post(f"/groups/{group.id}/groups",
# json={"name": "New group", "description": "New description"},
# headers=headers)
# assert res.status_code == status.HTTP_403_FORBIDDEN

# Try to delete members from group
res = await client_test.delete(f"/groups/{group.id}/members/{accounts[2].id}",
headers=headers)
assert res.status_code == status.HTTP_403_FORBIDDEN

# Try to get group permissions
res = await client_test.get(f"/groups/{group.id}/policy", headers=headers)
res = await client_test.get(f"/groups/{group.id}/policies", headers=headers)
assert res.status_code == status.HTTP_200_OK
policy = res.json()["policies"][0]

# Try to set group permissions
res = await client_test.put(f"/groups/{group.id}/policy",
res = await client_test.put(f"/groups/{group.id}/policies/{policy['id']}",
json={"permissions": Permissions.GROUP_BASIC_PERMISSIONS.name.split("|")},
headers=headers)
assert res.status_code == status.HTTP_403_FORBIDDEN
Expand All @@ -374,35 +368,45 @@ async def test_permissions(client_test: AsyncClient):

async def test_set_permissions(client_test: AsyncClient):
print("\n")
colored_dbg.test_info("Setting permissions of group members [PUT /groups/{group.id}/policy]")
colored_dbg.test_info("Setting permissions of group members [PUT /groups/{group.id}/policies/{policy.id}]")
active_user = accounts[0]
group = groups[0]

# Get policy of another member
response = await client_test.get(f"/groups/{group.id}/policies",
params={"account_id": str(accounts[1].id)},
headers={"Authorization": f"Bearer {active_user.token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
policy = response["policies"][0]

# Update policy of another member
response = await client_test.put(f"/groups/{group.id}/policy?",
json={"account_id": accounts[1].id,
"permissions": Permissions.GROUP_ALL_PERMISSIONS.name.split("|")},
response = await client_test.put(f"/groups/{group.id}/policies/{policy['id']}",
json={"permissions": Permissions.GROUP_ALL_PERMISSIONS.name.split("|")},
headers={"Authorization": f"Bearer {active_user.token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
assert response["permissions"] == Permissions.GROUP_ALL_PERMISSIONS.name.split("|")

# Check permissions
response = await client_test.get(f"/groups/{group.id}/policy?account_id={accounts[1].id}",
response = await client_test.get(f"/groups/{group.id}/policies?account_id={accounts[1].id}",
headers={"Authorization": f"Bearer {active_user.token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
assert response["permissions"] == Permissions.GROUP_ALL_PERMISSIONS.name.split("|")
policy = response["policies"][0]
assert policy["permissions"] == Permissions.GROUP_ALL_PERMISSIONS.name.split("|")

# Now the member should be able to get their policy information
await test_1_accounts.test_login(client_test, accounts[1]) # Login the active_user
colored_dbg.test_success("Signed in under {} {} ({})".format(
accounts[1].first_name, accounts[1].last_name, accounts[1].email))
response = await client_test.get(f"/groups/{group.id}/policy",
response = await client_test.get(f"/groups/{group.id}/policies",
params={"account_id": str(accounts[1].id)},
headers={"Authorization": f"Bearer {accounts[1].token}"})
assert response.status_code == status.HTTP_200_OK
response = response.json()
assert response["permissions"] == Permissions.GROUP_ALL_PERMISSIONS.name.split("|")
policy = response["policies"][0]
assert policy["permissions"] == Permissions.GROUP_ALL_PERMISSIONS.name.split("|")

colored_dbg.test_success("All members have the correct permissions")

Expand Down

0 comments on commit b65dc01

Please sign in to comment.