mirror of
https://github.com/ansible/awx.git
synced 2026-01-09 15:02:07 -03:30
817c3b36b9
Develop ability to list permissions for existing roles Create a model registry for RBAC-tracked models Write the data migration logic for creating the preloaded role definitions Write migration to migrate old Role into ObjectRole model This loops over the old Role model, knowing it is unique on object and role_field Most of the logic is concerned with identifying the needed permissions, and then corresponding role definition As needed, object roles are created and users then teams are assigned Write re-computation of cache logic for teams and then for object role permissions Migrate new RBAC internals to ansible_base Migrate tests to ansible_base Implement solution for visible_roles Expose URLs for DAB RBAC
18 lines
677 B
Python
18 lines
677 B
Python
import pytest
|
|
|
|
from awx.api.versioning import reverse
|
|
|
|
|
|
@pytest.mark.django_db
|
|
@pytest.mark.parametrize('role,code', [('member_role', 400), ('admin_role', 400), ('inventory_admin_role', 204)])
|
|
@pytest.mark.parametrize('reversed', [True, False])
|
|
def test_org_object_role_assigned_to_team(post, team, organization, org_admin, role, code, reversed):
|
|
if reversed:
|
|
url = reverse('api:role_teams_list', kwargs={'pk': getattr(organization, role).id})
|
|
sub_id = team.id
|
|
else:
|
|
url = reverse('api:team_roles_list', kwargs={'pk': team.id})
|
|
sub_id = getattr(organization, role).id
|
|
|
|
post(url=url, data={'id': sub_id}, user=org_admin, expect=code)
|