0001-models-authorize-superusers-to-access-every-service-.patch

Emmanuel Cazenave, 21 octobre 2021 18:26

Voir les différences: en ligne côte à côte

Subject: [PATCH] models: authorize superusers to access every service (#58059)

 src/authentic2/models.py |  2 ++
 tests/test_models.py     | 18 +++++++++++++++++-
 2 files changed, 19 insertions(+), 1 deletion(-)

         def authorize(self, user):
             if not self.authorized_roles.exists():
                 return True
             if user.is_superuser:
                 return True
             if user.roles_and_parents().filter(allowed_services=self).exists():
                 return True
             raise ServiceAccessDenied(service=self)

     import pytest
     from authentic2.custom_user.models import User
     from authentic2.models import Attribute
     from authentic2.models import Attribute, Service
     from authentic2.utils.misc import ServiceAccessDenied
     from django_rbac.utils import get_role_model
     def test_attribute_disabled(db):
-...
         with pytest.raises(AttributeError):
             user.attributes.test = '1234'
     def test_service_authorize(db):
         service = Service.objects.create(name='foo', slug='foo')
         role = get_role_model().objects.create(name='foo')
         service.authorized_roles.add(role)
         user = User.objects.create()
         with pytest.raises(ServiceAccessDenied):
             service.authorize(user)
         user.is_superuser = True
         user.save()
         assert service.authorize(user)
+    -

Produits Entr'ouvert » Authentic 2