mirror of
https://github.com/ansible/awx.git
synced 2026-01-26 16:11:30 -03:30
29b55fa04d
as it should have always been. This messes up being able to post to api/v1/users/:n/credentials and api/v1/teams/:n/credentials without specifyign the user/team id in the post body, but looking at the old code it looks like this might have always been the case, so whatevs.. This fixes a old v new access.py test "failure", and is better anyways..
243 lines
7.6 KiB
Python
243 lines
7.6 KiB
Python
import mock # noqa
|
|
import pytest
|
|
|
|
from django.core.urlresolvers import reverse
|
|
|
|
|
|
#
|
|
# user credential creation
|
|
#
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_user_credential_via_credentials_list(post, get, alice):
|
|
response = post(reverse('api:credential_list'), {
|
|
'user': alice.id,
|
|
'name': 'Some name',
|
|
'username': 'someusername'
|
|
}, alice)
|
|
assert response.status_code == 201
|
|
|
|
response = get(reverse('api:credential_list'), alice)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 1
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_user_credential_via_user_credentials_list(post, get, alice):
|
|
response = post(reverse('api:user_credentials_list', args=(alice.pk,)), {
|
|
'user': alice.pk,
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
}, alice)
|
|
assert response.status_code == 201
|
|
|
|
response = get(reverse('api:user_credentials_list', args=(alice.pk,)), alice)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 1
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_user_credential_via_credentials_list_xfail(post, alice, bob):
|
|
response = post(reverse('api:credential_list'), {
|
|
'user': bob.id,
|
|
'name': 'Some name',
|
|
'username': 'someusername'
|
|
}, alice)
|
|
assert response.status_code == 403
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_user_credential_via_user_credentials_list_xfail(post, alice, bob):
|
|
response = post(reverse('api:user_credentials_list', args=(bob.pk,)), {
|
|
'user': bob.pk,
|
|
'name': 'Some name',
|
|
'username': 'someusername'
|
|
}, alice)
|
|
assert response.status_code == 403
|
|
|
|
|
|
#
|
|
# team credential creation
|
|
#
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_team_credential(post, get, team, org_admin, team_member):
|
|
response = post(reverse('api:credential_list'), {
|
|
'team': team.id,
|
|
'name': 'Some name',
|
|
'username': 'someusername'
|
|
}, org_admin)
|
|
assert response.status_code == 201
|
|
|
|
response = get(reverse('api:team_credentials_list', args=(team.pk,)), team_member)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 1
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_team_credential_via_team_credentials_list(post, get, team, org_admin, team_member):
|
|
response = post(reverse('api:team_credentials_list', args=(team.pk,)), {
|
|
'team': team.pk,
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
}, org_admin)
|
|
assert response.status_code == 201
|
|
|
|
response = get(reverse('api:team_credentials_list', args=(team.pk,)), team_member)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 1
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_team_credential_by_urelated_user_xfail(post, team, alice, team_member):
|
|
response = post(reverse('api:credential_list'), {
|
|
'team': team.id,
|
|
'name': 'Some name',
|
|
'username': 'someusername'
|
|
}, alice)
|
|
assert response.status_code == 403
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_team_credential_by_team_member_xfail(post, team, alice, team_member):
|
|
# Members can't add credentials, only org admins.. for now?
|
|
response = post(reverse('api:credential_list'), {
|
|
'team': team.id,
|
|
'name': 'Some name',
|
|
'username': 'someusername'
|
|
}, team_member)
|
|
assert response.status_code == 403
|
|
|
|
|
|
|
|
#
|
|
# organization credentials
|
|
#
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_org_credential_as_not_admin(post, organization, org_member):
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
'organization': organization.id,
|
|
}, org_member)
|
|
assert response.status_code == 403
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_org_credential_as_admin(post, organization, org_admin):
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
'organization': organization.id,
|
|
}, org_admin)
|
|
assert response.status_code == 201
|
|
|
|
@pytest.mark.django_db
|
|
def test_credential_detail(post, get, organization, org_admin):
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
'organization': organization.id,
|
|
}, org_admin)
|
|
assert response.status_code == 201
|
|
response = get(reverse('api:credential_detail', args=(response.data['id'],)), org_admin)
|
|
assert response.status_code == 200
|
|
summary_fields = response.data['summary_fields']
|
|
assert 'organization' in summary_fields
|
|
assert summary_fields['organization']['id'] == organization.id
|
|
related_fields = response.data['related']
|
|
assert 'organization' in related_fields
|
|
|
|
@pytest.mark.django_db
|
|
def test_list_created_org_credentials(post, get, organization, org_admin, org_member):
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
'organization': organization.id,
|
|
}, org_admin)
|
|
assert response.status_code == 201
|
|
|
|
response = get(reverse('api:credential_list'), org_admin)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 1
|
|
|
|
response = get(reverse('api:credential_list'), org_member)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 0
|
|
|
|
response = get(reverse('api:organization_credential_list', args=(organization.pk,)), org_admin)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 1
|
|
|
|
response = get(reverse('api:organization_credential_list', args=(organization.pk,)), org_member)
|
|
assert response.status_code == 200
|
|
assert response.data['count'] == 0
|
|
|
|
|
|
|
|
#
|
|
# Openstack Credentials
|
|
#
|
|
|
|
@pytest.mark.django_db
|
|
def test_openstack_create_ok(post, organization, admin):
|
|
data = {
|
|
'kind': 'openstack',
|
|
'name': 'Best credential ever',
|
|
'username': 'some_user',
|
|
'password': 'some_password',
|
|
'project': 'some_project',
|
|
'host': 'some_host',
|
|
'organization': organization.id,
|
|
}
|
|
response = post(reverse('api:credential_list'), data, admin)
|
|
assert response.status_code == 201
|
|
|
|
@pytest.mark.django_db
|
|
def test_openstack_create_fail_required_fields(post, organization, admin):
|
|
data = {
|
|
'kind': 'openstack',
|
|
'name': 'Best credential ever',
|
|
'organization': organization.id,
|
|
}
|
|
response = post(reverse('api:credential_list'), data, admin)
|
|
assert response.status_code == 400
|
|
assert 'username' in response.data
|
|
assert 'password' in response.data
|
|
assert 'host' in response.data
|
|
assert 'project' in response.data
|
|
|
|
|
|
#
|
|
# misc xfail conditions
|
|
#
|
|
|
|
@pytest.mark.django_db
|
|
def test_create_credential_xfails(post, organization, team, admin):
|
|
# Must specify one of user, team, or organization
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
}, admin)
|
|
assert response.status_code == 400
|
|
# Can only specify one of user, team, or organization
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
'user': admin.id,
|
|
'organization': organization.id,
|
|
}, admin)
|
|
assert response.status_code == 400
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
'organization': organization.id,
|
|
'team': team.id,
|
|
}, admin)
|
|
assert response.status_code == 400
|
|
response = post(reverse('api:credential_list'), {
|
|
'name': 'Some name',
|
|
'username': 'someusername',
|
|
'user': admin.id,
|
|
'team': team.id,
|
|
}, admin)
|
|
assert response.status_code == 400
|
|
|
|
|
|
|
|
|