Introduce sso UserEnterpriseAuth model.

awx/sso/tests/functional/test_get_or_set_enterprise_user.py

@@ -0,0 +1,38 @@
+# Python
+import pytest
+import mock
+
+# Tower
+from awx.sso.backends import _get_or_set_enterprise_user
+
+
+@pytest.mark.django_db
+def test_fetch_user_if_exist(existing_tacacsplus_user):
+    new_user = _get_or_set_enterprise_user("foo", "password", "tacacs+")
+    assert new_user == existing_tacacsplus_user
+
+
+@pytest.mark.django_db
+def test_create_user_if_not_exist(existing_tacacsplus_user):
+    with mock.patch('awx.sso.backends.logger') as mocked_logger:
+        new_user = _get_or_set_enterprise_user("bar", "password", "tacacs+")
+        mocked_logger.debug.assert_called_once_with(
+            u'Created enterprise user bar via TACACS+ backend.'
+        )
+        assert new_user != existing_tacacsplus_user
+
+
+@pytest.mark.django_db
+def test_created_user_has_no_usable_password():
+    new_user = _get_or_set_enterprise_user("bar", "password", "tacacs+")
+    assert not new_user.has_usable_password()
+
+
+@pytest.mark.django_db
+def test_non_enterprise_user_does_not_get_pass(existing_normal_user):
+    with mock.patch('awx.sso.backends.logger') as mocked_logger:
+        new_user = _get_or_set_enterprise_user("alice", "password", "tacacs+")
+        mocked_logger.warn.assert_called_once_with(
+            u'Enterprise user alice already defined in Tower.'
+        )
+        assert new_user is None

awx/sso/tests/functional/test_tacacsplus.py

@@ -1,24 +0,0 @@
-import pytest
-import mock
-
-
-@pytest.mark.django_db
-def test_fetch_user_if_exist(tacacsplus_backend, existing_tacacsplus_user):
-    new_user = tacacsplus_backend._get_or_set_user("foo", "password")
-    assert new_user == existing_tacacsplus_user
-
-
-@pytest.mark.django_db
-def test_create_user_if_not_exist(tacacsplus_backend, existing_tacacsplus_user):
-    with mock.patch('awx.sso.backends.logger') as mocked_logger:
-        new_user = tacacsplus_backend._get_or_set_user("bar", "password")
-        mocked_logger.debug.assert_called_once_with(
-            'Created TACACS+ user bar'
-        )
-        assert new_user != existing_tacacsplus_user
-
-
-@pytest.mark.django_db
-def test_created_user_has_no_usable_password(tacacsplus_backend):
-    new_user = tacacsplus_backend._get_or_set_user("bar", "password")
-    assert not new_user.has_usable_password()