80 lines
2.8 KiB
Python
80 lines
2.8 KiB
Python
|
# -*- coding: utf-8 -*-
|
||
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
||
|
|
||
|
from odoo.addons.utm.tests.common import TestUTMCommon
|
||
|
from odoo.exceptions import AccessError
|
||
|
from odoo.tests.common import tagged, users
|
||
|
|
||
|
|
||
|
@tagged('post_install', '-at_install', 'security')
|
||
|
class TestUTMSecurity(TestUTMCommon):
|
||
|
|
||
|
@users('__system__')
|
||
|
def test_utm_security_admin(self):
|
||
|
""" base.group_system members can do anything on main UTM models. """
|
||
|
UtmCampaign = self.env['utm.campaign']
|
||
|
UtmMedium = self.env['utm.medium']
|
||
|
UtmSource = self.env['utm.source']
|
||
|
|
||
|
# CREATE
|
||
|
test_utm_campaign = UtmCampaign.create({'name': 'Campaign ACLs'})
|
||
|
test_utm_medium = UtmMedium.create({'name': 'Medium ACLs'})
|
||
|
test_utm_source = UtmSource.create({'name': 'Source ACLs'})
|
||
|
|
||
|
# READ
|
||
|
self.assertEqual(
|
||
|
UtmCampaign.search([('id', '=', test_utm_campaign.id)]),
|
||
|
test_utm_campaign)
|
||
|
self.assertEqual(
|
||
|
UtmMedium.search([('id', '=', test_utm_medium.id)]),
|
||
|
test_utm_medium)
|
||
|
self.assertEqual(
|
||
|
UtmSource.search([('id', '=', test_utm_source.id)]),
|
||
|
test_utm_source)
|
||
|
|
||
|
# UPDATE
|
||
|
test_utm_campaign.write({'name': 'Campaign EDITED'})
|
||
|
test_utm_medium.write({'name': 'Medium EDITED'})
|
||
|
test_utm_source.write({'name': 'Source EDITED'})
|
||
|
|
||
|
# UNLINK
|
||
|
test_utm_campaign.unlink()
|
||
|
test_utm_medium.unlink()
|
||
|
test_utm_source.unlink()
|
||
|
|
||
|
@users('user_employee_utm')
|
||
|
def test_utm_security_employee(self):
|
||
|
""" base.group_user members can do anything on main UTM models BUT unlink. """
|
||
|
UtmCampaign = self.env['utm.campaign']
|
||
|
UtmMedium = self.env['utm.medium']
|
||
|
UtmSource = self.env['utm.source']
|
||
|
|
||
|
# CREATE
|
||
|
test_utm_campaign = UtmCampaign.create({'name': 'Campaign ACLs'})
|
||
|
test_utm_medium = UtmMedium.create({'name': 'Medium ACLs'})
|
||
|
test_utm_source = UtmSource.create({'name': 'Source ACLs'})
|
||
|
|
||
|
# READ
|
||
|
self.assertEqual(
|
||
|
UtmCampaign.search([('id', '=', test_utm_campaign.id)]),
|
||
|
test_utm_campaign)
|
||
|
self.assertEqual(
|
||
|
UtmMedium.search([('id', '=', test_utm_medium.id)]),
|
||
|
test_utm_medium)
|
||
|
self.assertEqual(
|
||
|
UtmSource.search([('id', '=', test_utm_source.id)]),
|
||
|
test_utm_source)
|
||
|
|
||
|
# UPDATE
|
||
|
test_utm_campaign.write({'name': 'Campaign EDITED'})
|
||
|
test_utm_medium.write({'name': 'Medium EDITED'})
|
||
|
test_utm_source.write({'name': 'Source EDITED'})
|
||
|
|
||
|
# UNLINK
|
||
|
with self.assertRaises(AccessError):
|
||
|
test_utm_campaign.unlink()
|
||
|
with self.assertRaises(AccessError):
|
||
|
test_utm_medium.unlink()
|
||
|
with self.assertRaises(AccessError):
|
||
|
test_utm_source.unlink()
|