101 lines
4.5 KiB
Python
101 lines
4.5 KiB
Python
import pytest
|
|
import random
|
|
from backend.models.permission.constants import DefaultRoleEnum
|
|
from tests.base.authentication_web import AuthenticationWeb
|
|
|
|
|
|
class TestAssignRolesToUser:
|
|
@pytest.mark.asyncio
|
|
async def test_assign_roles_success_by_admin(self, authentication_web: AuthenticationWeb):
|
|
"""Test assigning roles to a user successfully by admin user."""
|
|
# Create a temporary user
|
|
temp_user = authentication_web.create_temporary_user()
|
|
# Create a new role
|
|
suffix = str(random.randint(10000, 99999))
|
|
role_resp = await authentication_web.create_role({
|
|
"role_key": f"assignrole_role_{suffix}",
|
|
"role_name": f"AssignRole Role {suffix}",
|
|
"role_description": "desc",
|
|
"role_level": 1
|
|
})
|
|
role_id = role_resp.json()["id"]
|
|
# Assign role to user
|
|
resp = await authentication_web.assign_roles_to_user({
|
|
"user_id": temp_user["user_id"], "role_ids": [role_id]
|
|
})
|
|
assert resp.status_code == 200
|
|
json = resp.json()
|
|
assert json["user_id"] == temp_user["user_id"]
|
|
assert json["role_ids"] == [role_id]
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_assign_roles_fail_by_non_admin(self, authentication_web_of_temp_user1: AuthenticationWeb):
|
|
"""Test assigning roles to a user fails by non-admin user (no permission)."""
|
|
# Create another temporary user
|
|
temp_user = authentication_web_of_temp_user1.create_temporary_user()
|
|
# Query default admin role
|
|
resp = await authentication_web_of_temp_user1.query_roles({"role_key": DefaultRoleEnum.ADMIN.value.role_key})
|
|
admin_role_id = resp.json()["items"][0]["id"]
|
|
# Try to assign admin role to another user
|
|
resp = await authentication_web_of_temp_user1.assign_roles_to_user({
|
|
"user_id": temp_user["user_id"], "role_ids": [admin_role_id]
|
|
})
|
|
assert resp.status_code == 403 or resp.status_code == 401
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_assign_roles_fail_role_not_found(self, authentication_web: AuthenticationWeb):
|
|
"""Test assigning roles fails when role_id does not exist."""
|
|
# Create a temporary user
|
|
temp_user = authentication_web.create_temporary_user()
|
|
# Try to assign non-existent role
|
|
resp = await authentication_web.assign_roles_to_user({
|
|
"user_id": temp_user["user_id"], "role_ids": ["000000000000000000000000"]
|
|
})
|
|
assert resp.status_code == 422 or resp.status_code == 400
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_assign_roles_fail_empty_role_ids(self, authentication_web: AuthenticationWeb):
|
|
"""Test assigning roles fails when role_ids is empty."""
|
|
# Create a temporary user
|
|
temp_user = authentication_web.create_temporary_user()
|
|
resp = await authentication_web.assign_roles_to_user({
|
|
"user_id": temp_user["user_id"], "role_ids": []
|
|
})
|
|
assert resp.status_code == 422 or resp.status_code == 400
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_assign_roles_fail_empty_user_id(self, authentication_web: AuthenticationWeb):
|
|
"""Test assigning roles fails when user_id is empty."""
|
|
# Query default admin role
|
|
resp = await authentication_web.query_roles({"role_key": DefaultRoleEnum.ADMIN.value.role_key})
|
|
admin_role_id = resp.json()["items"][0]["id"]
|
|
resp = await authentication_web.assign_roles_to_user({
|
|
"user_id": "", "role_ids": [admin_role_id]
|
|
})
|
|
assert resp.status_code == 422 or resp.status_code == 400
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_assign_roles_remove_duplicates(self, authentication_web: AuthenticationWeb):
|
|
"""Test assigning roles with duplicate role_ids removes duplicates."""
|
|
# Create a temporary user
|
|
temp_user = authentication_web.create_temporary_user()
|
|
# Create a new role
|
|
suffix = str(random.randint(10000, 99999))
|
|
role_resp = await authentication_web.create_role({
|
|
"role_key": f"assignrole_role_dup_{suffix}",
|
|
"role_name": f"AssignRole RoleDup {suffix}",
|
|
"role_description": "desc",
|
|
"role_level": 1
|
|
})
|
|
role_id = role_resp.json()["id"]
|
|
# Assign duplicate role_ids
|
|
resp = await authentication_web.assign_roles_to_user({
|
|
"user_id": temp_user["user_id"], "role_ids": [role_id, role_id, role_id]
|
|
})
|
|
assert resp.status_code == 200
|
|
json = resp.json()
|
|
assert json["role_ids"] == [role_id]
|
|
|
|
if __name__ == '__main__':
|
|
pytest.main([__file__])
|