Cheng Zhou
747dd55225
- deps 新增 list_active_pm_study_ids、is_active_project_pm 与 require_admin_or_any_project_pm 依赖，用于把 PM 项目范围带进鉴权与 监控。get_cra_site_scope 内部延后导入 site CRUD，避免循环依赖。 - system_permissions API 改用 PM/ADMIN 双角色入口，permissions/monitoring 系统级权限新增 PM 配额，并细化访问日志、告警、监控指标的可见范围。 - members API 调整：项目 PM 仅可管理低于 PM 的项目角色，禁止互相 改写或授予 PM。 - api_permissions API 增加 GET /api-permissions/me，返回当前用户在该 项目的有效权限矩阵；保存权限矩阵时校验 PM 行为不被篡改。 - core/api_permissions：新增立项配置接口键、PM 默认拥有的监控/权限 系统级条目，并在权限元信息中标注 PM 共享角色。 - core/project_permissions：role_has_api_permission 命中默认角色矩阵； replace_api_endpoint_permissions 改为部分更新且永不持久化 ADMIN/PM。 - studies setup-config 各端点改用接口级权限装饰器，与新的 setup_config 权限键对齐。permission_monitor 新增 get_metrics 摘要供 PM 视图调用。 - 测试：新增 test_admin_pm_permissions 覆盖 PM 系统级权限、监控范围和 成员管理边界；conftest 兼容 SA_UUID 列；权限相关用例同步移除已失效 的 module_permission 链路。 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
80 lines
1.9 KiB
Python
80 lines
1.9 KiB
Python
from contextlib import asynccontextmanager
|
|
from unittest.mock import AsyncMock
|
|
|
|
import pytest
|
|
from fastapi import FastAPI
|
|
|
|
from app import main
|
|
|
|
|
|
class _DummyTask:
|
|
def __init__(self):
|
|
self.awaited = False
|
|
self.cancelled = False
|
|
|
|
def cancel(self):
|
|
self.cancelled = True
|
|
|
|
def __await__(self):
|
|
async def _wait():
|
|
self.awaited = True
|
|
|
|
return _wait().__await__()
|
|
|
|
|
|
class _DummySession:
|
|
async def __aenter__(self):
|
|
return self
|
|
|
|
async def __aexit__(self, exc_type, exc, tb):
|
|
return False
|
|
|
|
|
|
class _DummyBegin:
|
|
async def __aenter__(self):
|
|
return self
|
|
|
|
async def __aexit__(self, exc_type, exc, tb):
|
|
return False
|
|
|
|
async def run_sync(self, fn):
|
|
return None
|
|
|
|
|
|
class _DummyEngine:
|
|
def begin(self):
|
|
return _DummyBegin()
|
|
|
|
|
|
@pytest.mark.asyncio
|
|
async def test_development_startup_does_not_seed_business_data(monkeypatch):
|
|
ensure_admin_exists = AsyncMock()
|
|
create_all = AsyncMock()
|
|
legacy_pk = AsyncMock()
|
|
scheduler_task = _DummyTask()
|
|
|
|
async def fake_scheduler(stop_event):
|
|
return None
|
|
|
|
def fake_create_task(coroutine):
|
|
coroutine.close()
|
|
return scheduler_task
|
|
|
|
@asynccontextmanager
|
|
async def fake_session_local():
|
|
yield _DummySession()
|
|
|
|
monkeypatch.setattr(main.settings, "ENV", "development")
|
|
monkeypatch.setattr(main, "ensure_admin_exists", ensure_admin_exists)
|
|
monkeypatch.setattr(main, "run_daily_lost_visit_job", fake_scheduler)
|
|
monkeypatch.setattr(main.asyncio, "create_task", fake_create_task)
|
|
monkeypatch.setattr(main, "engine", _DummyEngine())
|
|
monkeypatch.setattr(main, "SessionLocal", fake_session_local)
|
|
monkeypatch.setattr(main, "_ensure_legacy_primary_keys", legacy_pk)
|
|
monkeypatch.setattr(main.Base.metadata, "create_all", create_all)
|
|
|
|
async with main.lifespan(FastAPI()):
|
|
pass
|
|
|
|
ensure_admin_exists.assert_awaited_once()
|