Skip to content
Snippets Groups Projects
Commit 1ffaeff0 authored by Henrik tom Wörden's avatar Henrik tom Wörden
Browse files

TST: add a role test

parent 6ed0398a
No related branches found
No related tags found
1 merge request!61TST: deny role???
Pipeline #33472 passed
......@@ -1168,3 +1168,30 @@ def test_check_entity_acl_roles():
assert ret.get_warnings()[0].description == "User role does not exist."
db.administration.set_server_property("CHECK_ENTITY_ACL_ROLES_MODE", reset)
def test_deny_update_role():
p = db.Property(name="TestProperty", datatype=db.TEXT).insert()
assert p.is_valid()
grant_permission(p, "RETRIEVE:*")
grant_permission(p, "UPDATE:*")
'''Success'''
p.name = "TestPropertyNew"
assert_is_none(p.acl)
p.update()
'''Failure'''
switch_to_admin_user()
db.administration._set_permissions(
role=test_role, permission_rules=[
db.administration.PermissionRule(
"Deny", "TRANSACTION:UPDATE:*")])
switch_to_test_user()
p.retrieve()
p.name = "TestPropertyEvenNewer"
with raises(db.TransactionError) as te:
p.update()
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment