|
|
|
|
@ -3,8 +3,145 @@
|
|
|
|
|
# SPDX-License-Identifier: MIT
|
|
|
|
|
|
|
|
|
|
from http import HTTPStatus
|
|
|
|
|
from deepdiff import DeepDiff
|
|
|
|
|
import pytest
|
|
|
|
|
from .utils.config import get_method
|
|
|
|
|
|
|
|
|
|
from .utils.config import get_method, post_method
|
|
|
|
|
|
|
|
|
|
class TestGetTasks:
|
|
|
|
|
def _test_task_list_200(self, user, project_id, data, exclude_paths = '', **kwargs):
|
|
|
|
|
response = get_method(user, f'projects/{project_id}/tasks', **kwargs)
|
|
|
|
|
response_data = response.json()
|
|
|
|
|
assert response.status_code == HTTPStatus.OK
|
|
|
|
|
assert DeepDiff(data, response_data['results'], ignore_order=True, exclude_paths=exclude_paths) == {}
|
|
|
|
|
|
|
|
|
|
def _test_task_list_403(self, user, project_id, **kwargs):
|
|
|
|
|
response = get_method(user, f'projects/{project_id}/tasks', **kwargs)
|
|
|
|
|
assert response.status_code == HTTPStatus.FORBIDDEN
|
|
|
|
|
|
|
|
|
|
def _test_users_to_see_task_list(self, project_id, tasks, users, is_staff, is_allow, is_project_staff, **kwargs):
|
|
|
|
|
if is_staff:
|
|
|
|
|
users = [user for user in users if is_project_staff(user['id'], project_id) ]
|
|
|
|
|
else:
|
|
|
|
|
users = [user for user in users if not is_project_staff(user['id'], project_id)]
|
|
|
|
|
assert len(users)
|
|
|
|
|
|
|
|
|
|
for user in users:
|
|
|
|
|
if is_allow:
|
|
|
|
|
self._test_task_list_200(user['username'], project_id, tasks, **kwargs)
|
|
|
|
|
else:
|
|
|
|
|
self._test_task_list_403(user['username'], project_id, **kwargs)
|
|
|
|
|
|
|
|
|
|
def _test_assigned_users_to_see_task_data(self, tasks, users, is_task_staff, **kwargs):
|
|
|
|
|
for task in tasks:
|
|
|
|
|
staff_users = [user for user in users if is_task_staff(user['id'], task['id'])]
|
|
|
|
|
assert len(staff_users)
|
|
|
|
|
for user in staff_users:
|
|
|
|
|
response = get_method(user['username'], f'tasks', **kwargs)
|
|
|
|
|
response_data = response.json()
|
|
|
|
|
assert response.status_code == HTTPStatus.OK
|
|
|
|
|
assert any(_task['id'] == task['id'] for _task in response_data['results'])
|
|
|
|
|
|
|
|
|
|
# [sandbox] admin can see task data in project even he has no ownerships in this project
|
|
|
|
|
# [sandbox] business cannot see task data in project if he has no ownerships in this project
|
|
|
|
|
# [sandbox] user that has one of these ownerships: [Project:owner, Project:assignee] can see task data
|
|
|
|
|
@pytest.mark.parametrize('project_id', [1])
|
|
|
|
|
@pytest.mark.parametrize('groups, is_staff, is_allow', [
|
|
|
|
|
('admin', False, True),
|
|
|
|
|
('business', False, False),
|
|
|
|
|
])
|
|
|
|
|
def test_project_tasks_visibility(self, project_id, groups, users, tasks, is_staff, is_allow, find_users, is_project_staff):
|
|
|
|
|
users = find_users(privilege=groups)
|
|
|
|
|
tasks = list(filter(lambda x: x['project_id'] == project_id, tasks))
|
|
|
|
|
assert len(tasks)
|
|
|
|
|
|
|
|
|
|
self._test_users_to_see_task_list(project_id, tasks, users, is_staff, is_allow, is_project_staff)
|
|
|
|
|
|
|
|
|
|
# [sandbox] user that has one of these ownerships: [Owner, Assignee] can see task data
|
|
|
|
|
@pytest.mark.parametrize('project_id, groups', [(1, 'user')])
|
|
|
|
|
def test_task_assigneed_to_see_task(self, project_id, groups, users, tasks, find_users, is_task_staff):
|
|
|
|
|
users = find_users(privilege=groups)
|
|
|
|
|
tasks = list(filter(lambda x: x['project_id'] == project_id and x['assignee'], tasks))
|
|
|
|
|
assert len(tasks)
|
|
|
|
|
|
|
|
|
|
self._test_assigned_users_to_see_task_data(tasks, users, is_task_staff)
|
|
|
|
|
|
|
|
|
|
# [organization] maintainer can see task data even if he has no ownerships in corresponding Project, Task
|
|
|
|
|
# [organization] supervisor cannot see task data if he has no ownerships in corresponding Project, Task
|
|
|
|
|
# [organization] worker (as role) that has one of these ownerships: [Project:owner, Project:assignee], can see task data
|
|
|
|
|
@pytest.mark.parametrize('org, project_id', [({'id': 2, 'slug': 'org2'}, 2)])
|
|
|
|
|
@pytest.mark.parametrize('role, is_staff, is_allow', [
|
|
|
|
|
('maintainer', False, True),
|
|
|
|
|
('supervisor', False, False),
|
|
|
|
|
])
|
|
|
|
|
def test_org_project_tasks_visibility(self, org, project_id, role, is_staff, is_allow, tasks, is_task_staff, is_project_staff, find_users):
|
|
|
|
|
users = find_users(org=org['id'], role=role)
|
|
|
|
|
tasks = list(filter(lambda x: x['project_id'] == project_id, tasks))
|
|
|
|
|
assert len(tasks)
|
|
|
|
|
|
|
|
|
|
self._test_users_to_see_task_list(project_id, tasks, users, is_staff, is_allow, is_project_staff, org=org['slug'])
|
|
|
|
|
|
|
|
|
|
# [organization] worker (as role) that has one of these ownerships: [Owner, Assignee], can see task data
|
|
|
|
|
@pytest.mark.parametrize('org, project_id, role', [
|
|
|
|
|
({'id': 2, 'slug': 'org2'}, 2, 'worker')
|
|
|
|
|
])
|
|
|
|
|
def test_org_task_assigneed_to_see_task(self, org, project_id, role, users, tasks, find_users, is_task_staff):
|
|
|
|
|
users = find_users(org=org['id'], role=role)
|
|
|
|
|
tasks = list(filter(lambda x: x['project_id'] == project_id and x['assignee'], tasks))
|
|
|
|
|
assert len(tasks)
|
|
|
|
|
|
|
|
|
|
self._test_assigned_users_to_see_task_data(tasks, users, is_task_staff, org=org['slug'])
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
class TestPostTasks:
|
|
|
|
|
def _test_create_task_201(self, user, spec, **kwargs):
|
|
|
|
|
response = post_method(user, '/tasks', spec, **kwargs)
|
|
|
|
|
assert response.status_code == HTTPStatus.CREATED
|
|
|
|
|
|
|
|
|
|
def _test_create_task_403(self, user, spec, **kwargs):
|
|
|
|
|
response = post_method(user, '/tasks', spec, **kwargs)
|
|
|
|
|
assert response.status_code == HTTPStatus.FORBIDDEN
|
|
|
|
|
|
|
|
|
|
def _test_users_to_create_task_in_project(self, project_id, users, is_staff, is_allow, is_project_staff, **kwargs):
|
|
|
|
|
if is_staff:
|
|
|
|
|
users = [user for user in users if is_project_staff(user['id'], project_id) ]
|
|
|
|
|
else:
|
|
|
|
|
users = [user for user in users if not is_project_staff(user['id'], project_id)]
|
|
|
|
|
assert len(users)
|
|
|
|
|
|
|
|
|
|
for user in users:
|
|
|
|
|
username = user['username']
|
|
|
|
|
spec = {
|
|
|
|
|
'name': f'test {username} to create a task within a project',
|
|
|
|
|
'project_id': project_id,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if is_allow:
|
|
|
|
|
self._test_create_task_201(username, spec, **kwargs)
|
|
|
|
|
else:
|
|
|
|
|
self._test_create_task_403(username, spec, **kwargs)
|
|
|
|
|
|
|
|
|
|
# [sandbox] admin can create task in project even he has no ownerships in this project
|
|
|
|
|
# [sandbox] business cannot create task in project if he has no ownerships in this project
|
|
|
|
|
# [sandbox] user that has one of these ownerships: [Project:owner, Project:assignee] and has less than 10 task can create task in project
|
|
|
|
|
@pytest.mark.parametrize('project_id', [1])
|
|
|
|
|
@pytest.mark.parametrize('groups, is_staff, is_allow', [
|
|
|
|
|
('admin', False, True),
|
|
|
|
|
('business', False, False),
|
|
|
|
|
('user', True, True),
|
|
|
|
|
])
|
|
|
|
|
def test_users_to_create_task_in_project(self, project_id, groups, is_staff, is_allow, is_project_staff, find_users):
|
|
|
|
|
users = find_users(privilege=groups)
|
|
|
|
|
self._test_users_to_create_task_in_project(project_id, users, is_staff, is_allow, is_project_staff)
|
|
|
|
|
|
|
|
|
|
# [organization] worker cannot create task in project even he has no ownerships in this project
|
|
|
|
|
@pytest.mark.parametrize('org, project_id', [({'id': 2, 'slug': 'org2'}, 2)])
|
|
|
|
|
@pytest.mark.parametrize('role, is_staff, is_allow', [
|
|
|
|
|
('worker', False, False),
|
|
|
|
|
])
|
|
|
|
|
def test_worker_cannot_create_task_in_project_without_ownership(self, org, project_id, role, is_staff, is_allow, is_project_staff, find_users):
|
|
|
|
|
users = find_users(org=org['id'], role=role)
|
|
|
|
|
self._test_users_to_create_task_in_project(project_id, users, is_staff, is_allow, is_project_staff, org=org['slug'])
|
|
|
|
|
|
|
|
|
|
class TestGetData:
|
|
|
|
|
_USERNAME = 'user1'
|
|
|
|
|
@ -17,4 +154,4 @@ class TestGetData:
|
|
|
|
|
def test_frame_content_type(self, content_type, task_id):
|
|
|
|
|
response = get_method(self._USERNAME, f'tasks/{task_id}/data', type='frame', quality='original', number=0)
|
|
|
|
|
assert response.status_code == HTTPStatus.OK
|
|
|
|
|
assert response.headers['Content-Type'] == content_type
|
|
|
|
|
assert response.headers['Content-Type'] == content_type
|
Boris Sekachev
4 years ago
committed by
GitHub