Produits Entr'ouvert » Authentic 2

                       url(r'^ous/(?P<ou>[\w+]*)/roles/$',

                           api_views.roles_list_or_create, name='a2-api-role'),

                       url(r'^ous/(?P<ou>[\w+]*)/roles/(?P<slug>[\w+]*)/$',

                           api_views.roles_detail, name='a2-api-role'),

from .models import Attribute, PasswordReset, Service

class RoleSerializer(serializers.ModelSerializer):

    ou = serializers.SlugRelatedField(

        many=False,

        required=True,

        queryset=get_ou_model().objects.all(),

        slug_field='slug')

    uuid = serializers.CharField(required=True)

    name = serializers.CharField(required=True)

    slug = serializers.CharField(required=True)  # TODO? slugify from name?

    service = serializers.SlugRelatedField(

        many=False,

        required=False,

        queryset=Service.objects.all(),

        slug_field='slug')

    admin_scope_id = serializers.IntegerField(required=True, allow_null=True)

    # admin_scope_ct = serializers.IntegerField(required=True, allow_null=True) # XXX todo

    def __init__(self, *args, **kwargs):

        super(RoleSerializer, self).__init__(*args, **kwargs)

        request = kwargs['context'].get('request')

        if hasattr(request, 'parser_context'):

            ou = request.parser_context.get('kwargs', {}).get('ou')

            # XXX dirty

            #  /api/ous/(?P<ou>) not really a role lookup field

            #  but is necessary to restrain roles to a single OU.

            #  Gladly offering a pint to whoever fixes it...

            if 'data' in kwargs:

                kwargs['data']['ou'] = ou

            else:

                kwargs['data'] = {'ou': ou}

    # XXX That one won't fix the OU FK dereferencing issue while saving roles

    """

    def create(self, validated_data):

        Role = get_role_model()

        role = Role(**validated_data) # Necessary to created to FK linking to OU? Nope

        self.instance = role

        self.instance.save() # XXX Broken!! role.ou not saved in DB?!

        return role

    """

    # XXX That one won't fix it either, as it's not a data validation issue

    """

    def validate(self, data, *args, **kwargs):

        logger = logging.getLogger(__name__)

        data = super(RoleSerializer, self).validate(data, *args, **kwargs)

        Role = get_role_model()

        if len(Role.objects.filter(slug=data['slug'])):

            logger.error('error: role already existing in the A2 database')

            return

        return data

    """

    class Meta:

        model = get_role_model()

        fields = ['uuid', 'name', 'slug', 'ou',

                  'admin_scope_id', 'service']

class RolesAPI(ExceptionHandlerMixin, ModelViewSet):

    permission_classes = (permissions.IsAuthenticated,)

    serializer_class = RoleSerializer

    lookup_field = 'slug'

    def get_queryset(self):

        Role = get_role_model()

        return Role.objects.all()

roles_detail = RolesAPI.as_view({'get': 'retrieve'})

roles_list_or_create = RolesAPI.as_view({'post': 'create', 'get': 'list'})

from authentic2.models import Service

@pytest.fixture

def service1(db):

    return Service.objects.create(name='Service1', slug='service1')

def test_api_post_role_simple(app, user, ou1, service1):

    role_data = {

        'slug': 'coffee-manager',

        'service': 'service1',

        'uuid': 'RhFactor001',

        'name': 'Coffee Manager',

        'admin_scope_id': 2

        }

    # 'admin_scope_ct': 1, # TODO

    app.authorization = ('Basic', (user.username, user.username))

    resp = app.post_json('/api/ous/ou1/roles/', params=role_data)

    assert isinstance(resp.json, dict)

    Role = get_role_model()

    posted_role = Role.objects.get(slug='coffee-manager')

    for key, value in role_data.items():

        assert key in resp.json.keys()

        assert value in resp.json.values()

    assert posted_role.slug == role_data['slug']

    assert posted_role.uuid == role_data['uuid']

    assert posted_role.name == role_data['name']

    assert posted_role.admin_scope_id == role_data['admin_scope_id']

    #assert posted_role.ou.slug == 'ou1' # XXX

    assert posted_role.service.slug == role_data['service']

def test_api_get_role_description(app, user, role_random):

    app.authorization = ('Basic', (user.username, user.username))

    resp = app.get('/api/ous/ou1/roles/rando/')

    assert resp.json['slug'] == 'rando'

    # TODO

def test_api_get_role_list(app, user, role_random):

    app.authorization = ('Basic', (user.username, user.username))

    resp = app.get('/api/ous/ou1/roles/')

    role_fields = ['slug', 'uuid', 'name', 'admin_scope_id', 'service']

    for role_dict in resp.json['results']:

        for field in role_fields:

            assert field in role_dict