This is a Flamenco/Attract-style Manager object that's instantiated by the PillarApplication. It can create Organizations and assign/remove users. Also I updated the Organization schema to reflect the currently desired design. NOTA BENE: this does not include any security/authorisation checks on Eve's organizations collection.
159 lines
6.5 KiB
Python
159 lines
6.5 KiB
Python
from pillar.tests import AbstractPillarTest
|
||
|
||
import bson
|
||
|
||
|
||
class OrganizationCruTest(AbstractPillarTest):
|
||
"""Test creating and updating organizations."""
|
||
|
||
def test_create_org(self):
|
||
self.enter_app_context()
|
||
|
||
# There should be no organizations to begin with.
|
||
db = self.app.db('organizations')
|
||
self.assertEqual(0, db.count())
|
||
|
||
admin_uid = self.create_user(24 * 'a')
|
||
org_doc = self.app.org_manager.create_new_org('Хакеры', admin_uid, 25)
|
||
|
||
self.assertIsNotNone(db.find_one(org_doc['_id']))
|
||
self.assertEqual(bson.ObjectId(24 * 'a'), org_doc['admin_uid'])
|
||
self.assertEqual('Хакеры', org_doc['name'])
|
||
self.assertEqual(25, org_doc['seat_count'])
|
||
|
||
def test_assign_users(self):
|
||
self.enter_app_context()
|
||
|
||
admin_uid = self.create_user(24 * 'a')
|
||
member1_uid = self.create_user(24 * 'b', email='member1@example.com')
|
||
|
||
om = self.app.org_manager
|
||
org_doc = om.create_new_org('Хакеры', admin_uid, 25)
|
||
|
||
new_org_doc = om.assign_users(
|
||
org_doc['_id'],
|
||
['member1@example.com', 'member2@example.com'])
|
||
|
||
db = self.app.db('organizations')
|
||
db_org = db.find_one(org_doc['_id'])
|
||
|
||
self.assertEqual([member1_uid], db_org['members'])
|
||
self.assertEqual(['member2@example.com'], db_org['unknown_members'])
|
||
|
||
self.assertEqual([member1_uid], new_org_doc['members'])
|
||
self.assertEqual(['member2@example.com'], new_org_doc['unknown_members'])
|
||
|
||
def test_remove_users(self):
|
||
self.enter_app_context()
|
||
om = self.app.org_manager
|
||
|
||
admin_uid = self.create_user(24 * 'a')
|
||
self.create_user(24 * 'b', email='member1@example.com')
|
||
org_doc = om.create_new_org('Хакеры', admin_uid, 25)
|
||
|
||
om.assign_users(
|
||
org_doc['_id'],
|
||
['member1@example.com', 'member2@example.com'])
|
||
|
||
new_org_doc = None # to prevent 'might not be assigned' warning later on.
|
||
for email in ('member1@example.com', 'member2@example.com'):
|
||
new_org_doc = om.remove_user(org_doc['_id'], email=email)
|
||
|
||
db = self.app.db('organizations')
|
||
db_org = db.find_one(org_doc['_id'])
|
||
|
||
self.assertEqual([], db_org['members'])
|
||
self.assertEqual([], db_org['unknown_members'])
|
||
|
||
self.assertEqual([], new_org_doc['members'])
|
||
self.assertEqual([], new_org_doc['unknown_members'])
|
||
|
||
def test_assign_user_roles(self):
|
||
self.enter_app_context()
|
||
|
||
admin_uid = self.create_user(24 * 'a')
|
||
member1_uid = self.create_user(24 * 'b',
|
||
email='member1@example.com',
|
||
roles={'subscriber', 'monkeyhead'})
|
||
om = self.app.org_manager
|
||
org_doc = om.create_new_org('Хакеры', admin_uid, 25,
|
||
org_roles=['org-xакеры'])
|
||
|
||
new_org_doc = om.assign_users(org_doc['_id'], ['member1@example.com'])
|
||
self.assertEqual(['org-xакеры'], new_org_doc['org_roles'])
|
||
|
||
users_coll = self.app.db('users')
|
||
|
||
member1_doc = users_coll.find_one(member1_uid)
|
||
self.assertEqual(set(member1_doc['roles']), {'subscriber', 'monkeyhead', 'org-xакеры'})
|
||
|
||
def test_revoke_user_roles_simple(self):
|
||
self.enter_app_context()
|
||
|
||
admin_uid = self.create_user(24 * 'a')
|
||
member1_uid = self.create_user(24 * 'b',
|
||
email='member1@example.com',
|
||
roles={'subscriber', 'monkeyhead'})
|
||
om = self.app.org_manager
|
||
org_doc = om.create_new_org('Хакеры', admin_uid, 25, org_roles=['org-xакеры'])
|
||
|
||
om.assign_users(org_doc['_id'], ['member1@example.com'])
|
||
om.remove_user(org_doc['_id'], email='member1@example.com')
|
||
|
||
users_coll = self.app.db('users')
|
||
|
||
member1_doc = users_coll.find_one(member1_uid)
|
||
self.assertEqual(set(member1_doc['roles']), {'subscriber', 'monkeyhead'})
|
||
|
||
def test_revoke_user_roles_multiorg_by_email(self):
|
||
self.enter_app_context()
|
||
|
||
admin_uid = self.create_user(24 * 'a')
|
||
member1_uid = self.create_user(24 * 'b',
|
||
email='member1@example.com',
|
||
roles={'subscriber', 'monkeyhead'})
|
||
om = self.app.org_manager
|
||
org1 = om.create_new_org('Хакеры', admin_uid, 25, org_roles=['org-xакеры', 'org-subs'])
|
||
org2 = om.create_new_org('अजिङ्गर', admin_uid, 25, org_roles=['org-अजिङ्गर', 'org-subs'])
|
||
|
||
om.assign_users(org1['_id'], ['member1@example.com'])
|
||
om.assign_users(org2['_id'], ['member1@example.com'])
|
||
om.remove_user(org1['_id'], email='member1@example.com')
|
||
|
||
users_coll = self.app.db('users')
|
||
|
||
member1_doc = users_coll.find_one(member1_uid)
|
||
self.assertEqual(set(member1_doc['roles']),
|
||
{'subscriber', 'monkeyhead', 'org-subs', 'org-अजिङ्गर'})
|
||
|
||
def test_revoke_user_roles_multiorg_by_user_id(self):
|
||
self.enter_app_context()
|
||
|
||
admin_uid = self.create_user(24 * 'a')
|
||
member1_uid = self.create_user(24 * 'b',
|
||
email='member1@example.com',
|
||
roles={'subscriber', 'monkeyhead'})
|
||
om = self.app.org_manager
|
||
org1 = om.create_new_org('Хакеры', admin_uid, 25, org_roles=['org-xакеры', 'org-subs'])
|
||
org2 = om.create_new_org('अजिङ्गर', admin_uid, 25, org_roles=['org-अजिङ्गर', 'org-subs'])
|
||
|
||
# Hack the DB to add the member as "unknown member" too, even though we know this user.
|
||
# This has to be handled cleanly by the removal too.
|
||
orgs_coll = self.app.db('organizations')
|
||
orgs_coll.update_one({'_id': org1['_id']},
|
||
{'$set': {'unknown_members': ['member1@example.com']}})
|
||
|
||
om.assign_users(org1['_id'], ['member1@example.com'])
|
||
om.assign_users(org2['_id'], ['member1@example.com'])
|
||
om.remove_user(org1['_id'], user_id=member1_uid)
|
||
|
||
users_coll = self.app.db('users')
|
||
|
||
member1_doc = users_coll.find_one(member1_uid)
|
||
self.assertEqual(set(member1_doc['roles']),
|
||
{'subscriber', 'monkeyhead', 'org-subs', 'org-अजिङ्गर'})
|
||
|
||
# The unknown members list should be empty.
|
||
db_org1 = orgs_coll.find_one(org1['_id'])
|
||
self.assertEqual(db_org1['unknown_members'], [])
|