0004-check-and-repair-test-manage-members-perm-wrong-ou-r.patch
| tests/test_commands.py | ||
|---|---|---|
| 25 | 25 |
from django.utils.timezone import now |
| 26 | 26 |
import py |
| 27 | 27 | |
| 28 |
from authentic2.a2_rbac.models import MANAGE_MEMBERS_OP |
|
| 28 | 29 |
from authentic2.a2_rbac.utils import get_default_ou |
| 29 | 30 |
from authentic2.models import UserExternalId |
| 30 | 31 |
from authentic2_auth_oidc.models import OIDCProvider, OIDCAccount |
| ... | ... | |
| 317 | 318 |
assert 'invalid permission "Management / role / Role 1 (scope "Default organizational unit")": not admin_scope' in captured.out |
| 318 | 319 |
assert 'invalid permission "Management / role / Role 1 (scope "Default organizational unit")": wrong ou' in captured.out |
| 319 | 320 | |
| 321 |
perm1 = Permission.objects.get(operation=admin_op, target_id=role1.id) |
|
| 322 |
assert perm1.ou == default_ou |
|
| 323 |
manage_members_op = get_operation(MANAGE_MEMBERS_OP) |
|
| 324 |
perm1.op = manage_members_op |
|
| 325 |
perm1.save() |
|
| 326 |
call_command('check-and-repair', '--repair', '--noinput')
|
|
| 327 |
perm1 = Permission.objects.get(operation=manage_members_op, target_id=role1.id) |
|
| 328 |
assert perm1.ou is None |
|
| 320 | 329 | |
| 321 | 330 |
def test_check_and_delete_unused_permissions(db, capsys, simple_user): |
| 322 | 331 |
Permission = get_permission_model() |
| 323 |
- |
|