From 1d9dc0f9525a8e07b99bda22bc97200d5eafa8df Mon Sep 17 00:00:00 2001 From: vabene1111 Date: Mon, 27 Apr 2020 17:57:43 +0200 Subject: [PATCH] api permission tests --- cookbook/tests/views/test_views_api.py | 37 ++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 cookbook/tests/views/test_views_api.py diff --git a/cookbook/tests/views/test_views_api.py b/cookbook/tests/views/test_views_api.py new file mode 100644 index 000000000..a4baa5f5c --- /dev/null +++ b/cookbook/tests/views/test_views_api.py @@ -0,0 +1,37 @@ +from django.contrib import auth +from django.urls import reverse + +from cookbook.models import Recipe +from cookbook.tests.views.test_views import TestViews + + +class TestViewsApi(TestViews): + + def test_external_link_permission(self): + recipe = Recipe.objects.create( + internal=False, + link='test', + instructions='Do something', + working_time=1, + waiting_time=1, + created_by=auth.get_user(self.user_client_1) + ) + url = reverse('api_get_external_file_link', args=[recipe.pk]) + + self.assertEqual(self.anonymous_client.get(url).status_code, 302) + self.assertEqual(self.guest_client_1.get(url).status_code, 302) + self.assertEqual(self.user_client_1.get(url).status_code, 200) + self.assertEqual(self.admin_client_1.get(url).status_code, 200) + self.assertEqual(self.superuser_client.get(url).status_code, 200) + + def test_file_permission(self): + url = reverse('api_get_recipe_file', args=[1]) + + self.assertEqual(self.anonymous_client.get(url).status_code, 302) + self.assertEqual(self.guest_client_1.get(url).status_code, 302) + + def test_sync_permission(self): + url = reverse('api_sync') + + self.assertEqual(self.anonymous_client.get(url).status_code, 302) + self.assertEqual(self.guest_client_1.get(url).status_code, 302)