diff --git a/awx/main/tests/functional/test_rbac_core.py b/awx/main/tests/functional/test_rbac_core.py index 2ad1250f81..b558040b6f 100644 --- a/awx/main/tests/functional/test_rbac_core.py +++ b/awx/main/tests/functional/test_rbac_core.py @@ -241,3 +241,20 @@ def test_auto_parenting(): assert org2.admin_role.is_ancestor_of(prj1.admin_role) assert org2.admin_role.is_ancestor_of(prj2.admin_role) +@pytest.mark.django_db +def test_auto_m2m_parenting(team, project, user): + u = user('some-user') + team.member_role.members.add(u) + + assert project.accessible_by(u, {'read': True}) is False + + project.teams.add(team) + assert project.accessible_by(u, {'read': True}) + project.teams.remove(team) + assert project.accessible_by(u, {'read': True}) is False + + team.projects.add(project) + assert project.accessible_by(u, {'read': True}) + team.projects.remove(project) + assert project.accessible_by(u, {'read': True}) is False +