Produits Entr'ouvert » Authentic 2

from django.core.exceptions import MultipleObjectsReturned, DoesNotExist

class RoleSerializer(serializers.ModelSerializer):

    ou = serializers.SlugRelatedField(

        many=False,

        required=False,

        default=get_default_ou,

        queryset=get_ou_model().objects.all(),

        slug_field='slug')

    def check_perm(self, perm, ou=None):

        self.context['view'].check_perm(perm, ou)

    def create(self, validated_data):

        if self.check_perm('a2_rbac.add_role', validated_data.get('ou')):

            return super(RoleSerializer, self).create(validated_data)

    def update(self, instance, validated_data):

        if self.check_perm('a2_rbac.change_role', validated_data.get('ou')):

            return super(RoleSerializer, self).update(instance, validated_data)

    class Meta:

        model = get_role_model()

        exclude = ('service', 'admin_scope_id', 'admin_scope_ct',)

        extra_kwargs = {'uuid': {'read_only': True}}

class RolesAPI(ExceptionHandlerMixin, ModelViewSet):

    permission_classes = (permissions.IsAuthenticated,)

    serializer_class = RoleSerializer

    lookup_field = 'slug'

    queryset = get_role_model().objects.all()

    def check_perm(self, perm, ou=None):

        if ou:

            if not self.request.user.has_ou_perm(perm, ou):

                raise PermissionDenied(u'User %s does not have permission %s in %s' % (user, perm, ou))

        else:

            if not self.request.user.has_perm(perm):

                raise PermissionDenied(u'User %s do not have permission %s' % (user, perm))

    def _role_from_request(self, request, *args, **kwargs):

        role_slug = kwargs.get('slug')

        if role_slug:

            try:

                role = self.queryset.get(slug=role_slug)

            except (DoesNotExist, MultipleObjectsReturned):

                pass

            else:

                return role

    def retrieve(self, request, *args, **kwargs):

        role = self._role_from_request(self, request, *args, **kwargs)

        if role and self.check_perm('a2_rbac.view_role', getattr(role, 'ou', None)):

            return super(RolesAPI, self).retrieve(request, *args, **kwars)

    def destroy(self, request, *args, **kwargs):

        role = self._role_from_request(self, request, *args, **kwargs)

        if role and self.check_perm('a2_rbac.delete_role', getattr(role, 'ou', None)):

            return super(RolesAPI, self).destroy(request, *args, **kwars)

router.register(r'roles', RolesAPI, base_name='a2-api-roles')

def test_api_delete_role_authorized(app, superuser, simple_role):

    app.authorization = ('Basic', (superuser.username, superuser.username))

    app.delete('/api/roles/simple_role/')

def test_api_delete_role_unauthorized(app, simple_user, simple_role):

    app.authorization = ('Basic', (simple_user.username, simple_user.username))

    app.delete('/api/roles/simple_role/')

def test_api_put_role_authorized(app, superuser, simple_role):

    app.authorization = ('Basic', (superuser.username, superuser.username))

    role_data = {

        'name': 'updated-role',

    }

    resp = app.put_json('/api/roles/', params=role_data)

def test_api_put_role_unauthorized(app, simple_user, simple_role):

    app.authorization = ('Basic', (simple_user.username, simple_user.username))

    role_data = {

        'name': 'updated-role',

    }

    resp = app.put_json('/api/roles/', params=role_data)

def test_api_post_role_simple(app, superuser):

    app.authorization = ('Basic', (superuser.username, superuser.username))

    role_data = {

        'slug': 'coffee-manager',

        'name': 'Coffee Manager',

        'ou': 'ou1'

        }

    resp = app.post_json('/api/roles/', params=role_data)

    assert isinstance(resp.json, dict)

    Role = get_role_model()

    # Check attribute values against the server's response:

    for key, value in role_data.items():

        assert key in resp.json.keys()

        assert value in resp.json.values()

    # Check attributes values against the DB:

    posted_role = Role.objects.get(slug='coffee-manager')

    assert posted_role.slug == role_data['slug']

    assert posted_role.name == role_data['name']

    assert posted_role.ou.slug == 'ou1'

def test_api_get_role_description(app, superuser):

    app.authorization = ('Basic', (superuser.username, superuser.username))

    resp = app.get('/api/roles/rando/')

    assert resp.json['slug'] == 'rando'

    assert resp.json['ou'] == 'ou_rando'

def test_api_get_role_list(app, user):

    app.authorization = ('Basic', (user.username, user.username))

    resp = app.get('/api/roles/')

    role_fields = ['slug', 'uuid', 'name', 'ou']

    assert len(resp.json['results'])

    for role_dict in resp.json['results']:

        for field in role_fields:

            assert field in role_dict