From 8668f2ad4692161f62a47f3517f165de10cb9d8b Mon Sep 17 00:00:00 2001
From: AlanCoding <arominge@redhat.com>
Date: Mon, 16 Mar 2020 22:36:27 -0400
Subject: [PATCH] Add workflow to tower_role

---
 awx_collection/plugins/modules/tower_role.py |  6 ++++
 awx_collection/test/awx/test_role.py         | 37 ++++++++++++++++++++
 2 files changed, 43 insertions(+)
 create mode 100644 awx_collection/test/awx/test_role.py

diff --git a/awx_collection/plugins/modules/tower_role.py b/awx_collection/plugins/modules/tower_role.py
index 759e27bce5..80f3c5370a 100644
--- a/awx_collection/plugins/modules/tower_role.py
+++ b/awx_collection/plugins/modules/tower_role.py
@@ -50,6 +50,10 @@ options:
       description:
         - The job template the role acts on.
       type: str
+    workflow:
+      description:
+        - The job template the role acts on.
+      type: str
     credential:
       description:
         - Credential the role acts on.
@@ -108,6 +112,7 @@ def update_resources(module, p):
         'target_team': 'name',
         'inventory': 'name',
         'job_template': 'name',
+        'workflow': 'name',
         'credential': 'name',
         'organization': 'name',
         'project': 'name',
@@ -133,6 +138,7 @@ def main():
         target_team=dict(),
         inventory=dict(),
         job_template=dict(),
+        workflow=dict(),
         credential=dict(),
         organization=dict(),
         project=dict(),
diff --git a/awx_collection/test/awx/test_role.py b/awx_collection/test/awx/test_role.py
new file mode 100644
index 0000000000..8377bc3e38
--- /dev/null
+++ b/awx_collection/test/awx/test_role.py
@@ -0,0 +1,37 @@
+from __future__ import (absolute_import, division, print_function)
+__metaclass__ = type
+
+import pytest
+
+from awx.main.models import WorkflowJobTemplate, User
+
+
+@pytest.mark.django_db
+def test_grant_organization_permission(run_module, admin_user, organization):
+    rando = User.objects.create(username='rando')
+
+    result = run_module('tower_role', {
+        'user': rando.username,
+        'organization': organization.name,
+        'role': 'admin',
+        'state': 'present'
+    }, admin_user)
+    assert not result.get('failed', False), result.get('msg', result)
+
+    assert rando in organization.execute_role
+
+
+@pytest.mark.django_db
+def test_grant_workflow_permission(run_module, admin_user, organization):
+    wfjt = WorkflowJobTemplate.objects.create(organization=organization, name='foo-workflow')
+    rando = User.objects.create(username='rando')
+
+    result = run_module('tower_role', {
+        'user': rando.username,
+        'workflow': wfjt.name,
+        'role': 'execute',
+        'state': 'present'
+    }, admin_user)
+    assert not result.get('failed', False), result.get('msg', result)
+
+    assert rando in wfjt.execute_role