Changeset 78af3d1 in OpenWorkouts-current for ow/tests/models/test_workout.py

Timestamp:

Feb 9, 2019, 9:42:52 PM (5 years ago)

Author:

Borja Lopez <borja@…>

Branches:

current, feature/docs, master

Children:

56caf3d

Parents:

55470f9

Message:

Fix permissions. From now on users can see (and edit, delete, etc) their own data

File:

• ow/tests/models/test_workout.py (modified) (2 diffs)

ow/tests/models/test_workout.py

@@ -6 +6 @@
 
 import pytest
-from pyramid.security import Allow, Everyone
+from pyramid.security import Allow, Everyone, Deny, ALL_PERMISSIONS
 
 from ow.models.workout import Workout
@@ -33 +33 @@
     def test__acl__(self, root):
         # First check permissions for a workout without parent
-        permissions = [(Allow, Everyone, 'view'),
-                       (Allow, 'group:admins', 'edit')]
-        workout = Workout()
-        assert workout.__acl__() == permissions
-
+        workout = Workout()
+        with pytest.raises(AttributeError):
+            workout.__acl__()
         # Now permissions on a workout that has been added to a user
         uid = str(root['john'].uid)
-        permissions = [(Allow, uid, 'view'), (Allow, uid, 'edit')]
-        assert root['john']['1'].__acl__() == permissions
+        workout = root['john']['1']
+        permissions = [
+            (Allow, uid, 'view'),
+            (Allow, uid, 'edit'),
+            (Allow, uid, 'delete'),
+            (Deny, Everyone, ALL_PERMISSIONS)
+        ]
+        assert workout.__acl__() == permissions
 
     def test_runthrough(self, root):