Cheng Zhou
26 lines
658 B
Python
26 lines
658 B
Python
from dataclasses import dataclass
|
|
|
|
from app.core import rbac
|
|
|
|
|
|
@dataclass
|
|
class UserStub:
|
|
role: str
|
|
|
|
|
|
@dataclass
|
|
class MemberStub:
|
|
role_in_study: str
|
|
|
|
|
|
def test_non_admin_global_role_does_not_grant_project_document_permission():
|
|
assert not rbac.is_allowed("delete_document", UserStub(role="PM"), MemberStub(role_in_study="CRA"))
|
|
|
|
|
|
def test_project_role_grants_project_document_permission():
|
|
assert rbac.is_allowed("delete_document", UserStub(role="CRA"), MemberStub(role_in_study="PM"))
|
|
|
|
|
|
def test_global_admin_keeps_system_document_permission_without_membership():
|
|
assert rbac.is_allowed("delete_document", UserStub(role="ADMIN"), None)
|