utm/tests/test_utm_security.py

80 lines
2.8 KiB
Python
Raw Normal View History

2024-05-03 15:31:11 +03:00
# -*- coding: utf-8 -*-
# Part of Odoo. See LICENSE file for full copyright and licensing details.
from odoo.addons.utm.tests.common import TestUTMCommon
from odoo.exceptions import AccessError
from odoo.tests.common import tagged, users
@tagged('post_install', '-at_install', 'security')
class TestUTMSecurity(TestUTMCommon):
@users('__system__')
def test_utm_security_admin(self):
""" base.group_system members can do anything on main UTM models. """
UtmCampaign = self.env['utm.campaign']
UtmMedium = self.env['utm.medium']
UtmSource = self.env['utm.source']
# CREATE
test_utm_campaign = UtmCampaign.create({'name': 'Campaign ACLs'})
test_utm_medium = UtmMedium.create({'name': 'Medium ACLs'})
test_utm_source = UtmSource.create({'name': 'Source ACLs'})
# READ
self.assertEqual(
UtmCampaign.search([('id', '=', test_utm_campaign.id)]),
test_utm_campaign)
self.assertEqual(
UtmMedium.search([('id', '=', test_utm_medium.id)]),
test_utm_medium)
self.assertEqual(
UtmSource.search([('id', '=', test_utm_source.id)]),
test_utm_source)
# UPDATE
test_utm_campaign.write({'name': 'Campaign EDITED'})
test_utm_medium.write({'name': 'Medium EDITED'})
test_utm_source.write({'name': 'Source EDITED'})
# UNLINK
test_utm_campaign.unlink()
test_utm_medium.unlink()
test_utm_source.unlink()
@users('user_employee_utm')
def test_utm_security_employee(self):
""" base.group_user members can do anything on main UTM models BUT unlink. """
UtmCampaign = self.env['utm.campaign']
UtmMedium = self.env['utm.medium']
UtmSource = self.env['utm.source']
# CREATE
test_utm_campaign = UtmCampaign.create({'name': 'Campaign ACLs'})
test_utm_medium = UtmMedium.create({'name': 'Medium ACLs'})
test_utm_source = UtmSource.create({'name': 'Source ACLs'})
# READ
self.assertEqual(
UtmCampaign.search([('id', '=', test_utm_campaign.id)]),
test_utm_campaign)
self.assertEqual(
UtmMedium.search([('id', '=', test_utm_medium.id)]),
test_utm_medium)
self.assertEqual(
UtmSource.search([('id', '=', test_utm_source.id)]),
test_utm_source)
# UPDATE
test_utm_campaign.write({'name': 'Campaign EDITED'})
test_utm_medium.write({'name': 'Medium EDITED'})
test_utm_source.write({'name': 'Source EDITED'})
# UNLINK
with self.assertRaises(AccessError):
test_utm_campaign.unlink()
with self.assertRaises(AccessError):
test_utm_medium.unlink()
with self.assertRaises(AccessError):
test_utm_source.unlink()