46 lines
1.9 KiB
Python
46 lines
1.9 KiB
Python
from django.contrib.auth.models import User
|
|
from django.test import TestCase
|
|
from django.urls import reverse
|
|
|
|
|
|
class TestBackofficeAccess(TestCase):
|
|
def test_anonymous_user_is_redirected_to_login(self):
|
|
response = self.client.get(reverse('backoffice:dashboard'))
|
|
assert response.status_code == 302
|
|
assert reverse('users:login') in response.url
|
|
|
|
def test_authenticated_non_staff_user_gets_forbidden(self):
|
|
user = User.objects.create_user('luke', 'luke@rebels.com', 'ihatesand', is_staff=False)
|
|
self.client.force_login(user)
|
|
|
|
response = self.client.get(reverse('backoffice:dashboard'))
|
|
assert response.status_code == 403
|
|
|
|
def test_superuser_can_access_dashboard(self):
|
|
user = User.objects.create_superuser('vader', 'vader@empire.com', 'ihatesand')
|
|
self.client.force_login(user)
|
|
|
|
response = self.client.get(reverse('backoffice:dashboard'))
|
|
assert response.status_code == 200
|
|
|
|
def test_staff_without_specific_permission_gets_forbidden_on_product_list(self):
|
|
user = User.objects.create_user('han', 'han@falcon.com', 'ihatesand', is_staff=True)
|
|
self.client.force_login(user)
|
|
|
|
response = self.client.get(reverse('backoffice:product_list'))
|
|
assert response.status_code == 403
|
|
|
|
def test_non_staff_user_gets_forbidden_on_ws_demo(self):
|
|
user = User.objects.create_user('leia', 'leia@rebels.com', 'ihatesand', is_staff=False)
|
|
self.client.force_login(user)
|
|
|
|
response = self.client.get(reverse('backoffice:ws_demo'))
|
|
assert response.status_code == 403
|
|
|
|
def test_superuser_can_access_ws_demo(self):
|
|
user = User.objects.create_superuser('vader2', 'vader2@empire.com', 'ihatesand')
|
|
self.client.force_login(user)
|
|
|
|
response = self.client.get(reverse('backoffice:ws_demo'))
|
|
assert response.status_code == 200
|