funkwhale/api/tests/users/test_permissions.py

import pytest
from rest_framework.views import APIView

from funkwhale_api.users import permissions


def test_has_user_permission_no_user(api_request):
    view = APIView.as_view()
    permission = permissions.HasUserPermission()
    request = api_request.get("/")
    assert permission.has_permission(request, view) is False


def test_has_user_permission_anonymous(anonymous_user, api_request):
    view = APIView.as_view()
    permission = permissions.HasUserPermission()
    request = api_request.get("/")
    setattr(request, "user", anonymous_user)
    assert permission.has_permission(request, view) is False


@pytest.mark.parametrize("value", [True, False])
def test_has_user_permission_logged_in_single(value, factories, api_request):
    user = factories["users.User"](permission_federation=value)

    class View(APIView):
        required_permissions = ["federation"]

    view = View()
    permission = permissions.HasUserPermission()
    request = api_request.get("/")
    setattr(request, "user", user)
    result = permission.has_permission(request, view)
    assert result == user.has_permissions("federation") == value


@pytest.mark.parametrize(
    "federation,library,expected",
    [
        (True, False, False),
        (False, True, False),
        (False, False, False),
        (True, True, True),
    ],
)
def test_has_user_permission_logged_in_multiple_and(
    federation, library, expected, factories, api_request
):
    user = factories["users.User"](
        permission_federation=federation, permission_library=library
    )

    class View(APIView):
        required_permissions = ["federation", "library"]
        permission_operator = "and"

    view = View()
    permission = permissions.HasUserPermission()
    request = api_request.get("/")
    setattr(request, "user", user)
    result = permission.has_permission(request, view)
    assert result == user.has_permissions("federation", "library") == expected


@pytest.mark.parametrize(
    "federation,library,expected",
    [
        (True, False, True),
        (False, True, True),
        (False, False, False),
        (True, True, True),
    ],
)
def test_has_user_permission_logged_in_multiple_or(
    federation, library, expected, factories, api_request
):
    user = factories["users.User"](
        permission_federation=federation, permission_library=library
    )

    class View(APIView):
        required_permissions = ["federation", "library"]
        permission_operator = "or"

    view = View()
    permission = permissions.HasUserPermission()
    request = api_request.get("/")
    setattr(request, "user", user)
    result = permission.has_permission(request, view)
    has_permission_result = user.has_permissions("federation", "library", operator="or")

    assert result == has_permission_result == expected