Model Permissions Delete Test Cases

---

Source code in app/api/tests/abstract/api_permissions.py

class APIPermissionDelete:


    model: object
    """ Item Model to test """

    app_namespace: str = None
    """ URL namespace """

    url_name: str
    """ URL name of the view to test """

    url_view_kwargs: dict = None
    """ URL kwargs of the item page """

    delete_data: dict = None


    def test_delete_user_anon_denied(self):
        """ Check correct permission for delete

        Attempt to delete item as anon user
        """

        client = Client()
        url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


        response = client.delete(url, data=self.delete_data)

        assert response.status_code == 401


    def test_delete_no_permission_denied(self):
        """ Check correct permission for delete

        Attempt to delete as user with no permissons
        """

        client = Client()
        url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


        client.force_login(self.no_permissions_user)
        response = client.delete(url, data=self.delete_data)

        assert response.status_code == 403


    def test_delete_different_organization_denied(self):
        """ Check correct permission for delete

        Attempt to delete as user from different organization
        """

        client = Client()
        url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


        client.force_login(self.different_organization_user)
        response = client.delete(url, data=self.delete_data)

        assert response.status_code == 403


    def test_delete_permission_view_denied(self):
        """ Check correct permission for delete

        Attempt to delete as user with veiw permission only
        """

        client = Client()
        url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


        client.force_login(self.view_user)
        response = client.delete(url, data=self.delete_data)

        assert response.status_code == 403


    def test_delete_permission_add_denied(self):
        """ Check correct permission for delete

        Attempt to delete as user with add permission only
        """

        client = Client()
        url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


        client.force_login(self.add_user)
        response = client.delete(url, data=self.delete_data)

        assert response.status_code == 403


    def test_delete_permission_change_denied(self):
        """ Check correct permission for delete

        Attempt to delete as user with change permission only
        """

        client = Client()
        url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


        client.force_login(self.change_user)
        response = client.delete(url, data=self.delete_data)

        assert response.status_code == 403


    def test_delete_has_permission(self):
        """ Check correct permission for delete

        Delete item as user with delete permission
        """

        client = Client()
        url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


        client.force_login(self.delete_user)
        response = client.delete(url, data=self.delete_data)

        assert response.status_code == 204

Attributes

model: object

Item Model to test

app_namespace: str = None

URL namespace

url_name: str

URL name of the view to test

url_view_kwargs: dict = None

URL kwargs of the item page

delete_data: dict = None

Functions

test_delete_user_anon_denied()

Check correct permission for delete

Attempt to delete item as anon user

Source code in app/api/tests/abstract/api_permissions.py

def test_delete_user_anon_denied(self):
    """ Check correct permission for delete

    Attempt to delete item as anon user
    """

    client = Client()
    url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


    response = client.delete(url, data=self.delete_data)

    assert response.status_code == 401

test_delete_no_permission_denied()

Check correct permission for delete

Attempt to delete as user with no permissons

Source code in app/api/tests/abstract/api_permissions.py

def test_delete_no_permission_denied(self):
    """ Check correct permission for delete

    Attempt to delete as user with no permissons
    """

    client = Client()
    url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


    client.force_login(self.no_permissions_user)
    response = client.delete(url, data=self.delete_data)

    assert response.status_code == 403

test_delete_different_organization_denied()

Check correct permission for delete

Attempt to delete as user from different organization

Source code in app/api/tests/abstract/api_permissions.py

def test_delete_different_organization_denied(self):
    """ Check correct permission for delete

    Attempt to delete as user from different organization
    """

    client = Client()
    url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


    client.force_login(self.different_organization_user)
    response = client.delete(url, data=self.delete_data)

    assert response.status_code == 403

test_delete_permission_view_denied()

Check correct permission for delete

Attempt to delete as user with veiw permission only

Source code in app/api/tests/abstract/api_permissions.py

def test_delete_permission_view_denied(self):
    """ Check correct permission for delete

    Attempt to delete as user with veiw permission only
    """

    client = Client()
    url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


    client.force_login(self.view_user)
    response = client.delete(url, data=self.delete_data)

    assert response.status_code == 403

test_delete_permission_add_denied()

Check correct permission for delete

Attempt to delete as user with add permission only

Source code in app/api/tests/abstract/api_permissions.py

def test_delete_permission_add_denied(self):
    """ Check correct permission for delete

    Attempt to delete as user with add permission only
    """

    client = Client()
    url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


    client.force_login(self.add_user)
    response = client.delete(url, data=self.delete_data)

    assert response.status_code == 403

test_delete_permission_change_denied()

Check correct permission for delete

Attempt to delete as user with change permission only

Source code in app/api/tests/abstract/api_permissions.py

def test_delete_permission_change_denied(self):
    """ Check correct permission for delete

    Attempt to delete as user with change permission only
    """

    client = Client()
    url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


    client.force_login(self.change_user)
    response = client.delete(url, data=self.delete_data)

    assert response.status_code == 403

test_delete_has_permission()

Check correct permission for delete

Delete item as user with delete permission

Source code in app/api/tests/abstract/api_permissions.py

def test_delete_has_permission(self):
    """ Check correct permission for delete

    Delete item as user with delete permission
    """

    client = Client()
    url = reverse(self.app_namespace + ':' + self.url_name, kwargs=self.url_view_kwargs)


    client.force_login(self.delete_user)
    response = client.delete(url, data=self.delete_data)

    assert response.status_code == 204

About:

This page forms part of our Project Centurion ERP.

Page Metadata

Version: ToDo: place files short git commit here
Date Created: 2024-06-15
Date Edited: 2024-07-09

Contribution:

Would You like to contribute to our Centurion ERP project? You can assist in the following ways:

• Edit This Page If there is a mistake or a way you can improve it.
• Add a Page to the Manual if you would like to add an item to our manual
• Raise an Issue if there is something about this page you would like to improve, and git is unfamiliar to you.

 

ToDo: Add the page list of contributors