nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

test(project_management): Ensure items returned are from users orgs only for API v2 endpoints

Browse Source 
ref: #248 #359 #397
This commit is contained in:
Jon Lockwood
2024-11-27 21:58:10 +09:30
parent 3d980de05c
commit 346b41cc26
4 changed files with 34 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/project_management/tests/functional/project/test_project_viewset.py
View File

@ -43,6 +43,8 @@ class ViewSetBase:
different_organization = Organization.objects.create(name='test_different_organization')
self.different_organization = different_organization
view_permissions = Permission.objects.get(
codename = 'view_' + self.model._meta.model_name,
@ -149,6 +151,11 @@ class ViewSetBase:
name = 'one-add'
)
self.other_org_item = self.model.objects.create(
organization = self.different_organization,
name = 'two-add'
)
self.url_view_kwargs = {'pk': self.item.id}

13
app/project_management/tests/functional/project_milestone/test_project_milestone_viewset.py
View File

@ -42,6 +42,8 @@ class ViewSetBase:
different_organization = Organization.objects.create(name='test_different_organization')
self.different_organization = different_organization
view_permissions = Permission.objects.get(
codename = 'view_' + self.model._meta.model_name,
@ -124,6 +126,11 @@ class ViewSetBase:
name = 'proj milestone test'
)
project_b = Project.objects.create(
organization = self.different_organization,
name = 'proj b milestone test'
)
self.item = self.model.objects.create(
organization = self.organization,
@ -131,6 +138,12 @@ class ViewSetBase:
project = project
)
self.other_org_item = self.model.objects.create(
organization = self.different_organization,
name = 'two-add',
project = project_b
)
self.url_view_kwargs = {'project_id': project.id, 'pk': self.item.id}

7
app/project_management/tests/functional/project_state/test_project_state_viewset.py
View File

@ -42,6 +42,8 @@ class ViewSetBase:
different_organization = Organization.objects.create(name='test_different_organization')
self.different_organization = different_organization
view_permissions = Permission.objects.get(
codename = 'view_' + self.model._meta.model_name,
@ -125,6 +127,11 @@ class ViewSetBase:
name = 'one-add'
)
self.other_org_item = self.model.objects.create(
organization = self.different_organization,
name = 'two-add'
)
self.url_view_kwargs = {'pk': self.item.id}

7
app/project_management/tests/functional/project_type/test_project_type_viewset.py
View File

@ -42,6 +42,8 @@ class ViewSetBase:
different_organization = Organization.objects.create(name='test_different_organization')
self.different_organization = different_organization
view_permissions = Permission.objects.get(
codename = 'view_' + self.model._meta.model_name,
@ -125,6 +127,11 @@ class ViewSetBase:
name = 'one-add'
)
self.other_org_item = self.model.objects.create(
organization = self.different_organization,
name = 'two-add'
)
self.url_view_kwargs = {'pk': self.item.id}