src/cm/tests/test_security.py
changeset 287 fc5ed157ebfe
parent 0 40c8f766c9b8
child 590 e103299bccc0
child 606 52f3e090eed9
equal deleted inserted replaced
282:b5deb8e32219 287:fc5ed157ebfe
    15     fixtures = ['roles_generic','test_content']
    15     fixtures = ['roles_generic','test_content']
    16     
    16     
    17     def test_access_rights(self):
    17     def test_access_rights(self):
    18         # anon user sees no text
    18         # anon user sees no text
    19         request = FalseRequest(None)                
    19         request = FalseRequest(None)                
    20         self.assertEqual(get_texts_with_perm(request, 'can_view_text').count(), 0)
    20         self.assertEqual(get_texts_with_perm(request, 'can_view_text').count(), 2)
    21 
    21 
    22         # user 1 sees all texts
    22         # user 1 sees all texts
    23         user1 = UserProfile.objects.get(id=1).user        
    23         user1 = UserProfile.objects.get(id=1).user        
    24         request = FalseRequest(user1)       
    24         request = FalseRequest(user1)       
    25         self.assertEqual(get_texts_with_perm(request, 'can_view_text').count(), 3)
    25         self.assertEqual(get_texts_with_perm(request, 'can_view_text').count(), 5)
    26         
    26         
    27         # user 2 sees only 2 texts
    27         # user 2 sees only 4 texts
    28         user2 = UserProfile.objects.get(id=2).user
    28         user2 = UserProfile.objects.get(id=2).user
    29         request = FalseRequest(user2)        
    29         request = FalseRequest(user2)        
    30         self.assertEqual(get_texts_with_perm(request, 'can_view_text').count(), 2)
    30         self.assertEqual(get_texts_with_perm(request, 'can_view_text').count(), 4)
    31 
    31 
    32         # user 4 sees only 2 texts (global manager but commentator on text 4
    32         # user 4 manages only 2 texts (global manager but commentator on text 4
    33         user4 = UserProfile.objects.get(id=4).user
    33         user4 = UserProfile.objects.get(id=4).user
    34         request = FalseRequest(user4)
    34         request = FalseRequest(user4)
    35         self.assertEqual(get_texts_with_perm(request, 'can_manage_text').count(), 2)
    35         self.assertEqual(get_texts_with_perm(request, 'can_manage_text').count(), 2)
    36 
    36 
    37     def test_moderation_tricks_a_priori(self):
    37     def test_moderation_tricks_a_priori(self):