mirror of
https://github.com/quay/quay.git
synced 2026-01-26 06:21:37 +03:00
5f63b3a7bb
* chore: drop deprecated tables and remove unused code * isort imports * migration: check for table existence before drop
39 lines
1.1 KiB
Python
39 lines
1.1 KiB
Python
from test.fixtures import *
|
|
|
|
import pytest
|
|
|
|
from auth import scopes
|
|
from auth.permissions import QuayDeferredPermissionUser, SuperUserPermission
|
|
from data import model
|
|
|
|
SUPER_USERNAME = "devtable"
|
|
UNSUPER_USERNAME = "freshuser"
|
|
|
|
|
|
@pytest.fixture()
|
|
def superuser(initialized_db):
|
|
return model.user.get_user(SUPER_USERNAME)
|
|
|
|
|
|
@pytest.fixture()
|
|
def normie(initialized_db):
|
|
return model.user.get_user(UNSUPER_USERNAME)
|
|
|
|
|
|
def test_superuser_matrix(superuser, normie):
|
|
test_cases = [
|
|
(superuser, {scopes.SUPERUSER}, True),
|
|
(superuser, {scopes.DIRECT_LOGIN}, True),
|
|
(superuser, {scopes.READ_USER, scopes.SUPERUSER}, True),
|
|
(superuser, {scopes.READ_USER}, False),
|
|
(normie, {scopes.SUPERUSER}, False),
|
|
(normie, {scopes.DIRECT_LOGIN}, False),
|
|
(normie, {scopes.READ_USER, scopes.SUPERUSER}, False),
|
|
(normie, {scopes.READ_USER}, False),
|
|
]
|
|
|
|
for user_obj, scope_set, expected in test_cases:
|
|
perm_user = QuayDeferredPermissionUser.for_user(user_obj, scope_set)
|
|
has_su = perm_user.can(SuperUserPermission())
|
|
assert has_su == expected
|