encode/django-rest-framework
1
1
Fork 0
mirror of https://github.com/encode/django-rest-framework.git synced 2025-07-16 19:22:24 +03:00
Code Issues Packages Projects Releases Wiki Activity

Add tests for DjangoModelPermissionsOrAnonReadOnly

Browse Source
This commit is contained in:
Justin Farnsworth 2024-03-20 11:07:37 -04:00
parent b4cb27fd94
commit 25d4a407f0
1 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
tests/test_permissions.py
View File

@ -32,6 +32,10 @@ class RootView(generics.ListCreateAPIView):
permission_classes = [permissions.DjangoModelPermissions]
class AnonReadOnlyRootView(RootView):
permission_classes = [permissions.DjangoModelPermissionsOrAnonReadOnly]
class InstanceView(generics.RetrieveUpdateDestroyAPIView):
queryset = BasicModel.objects.all()
serializer_class = BasicSerializer
@ -65,6 +69,7 @@ instance_view = InstanceView.as_view()
get_queryset_list_view = GetQuerySetListView.as_view()
empty_list_view = EmptyListView.as_view()
ignored_get_queryset_list_view = IgnoredGetQuerySetListView.as_view()
anon_read_only_root_view = AnonReadOnlyRootView.as_view()
def basic_auth_header(username, password):
@ -285,6 +290,39 @@ class ModelPermissionsIntegrationTests(TestCase):
with self.assertRaisesMessage(AssertionError, 'View.get_queryset() returned None'):
view(request)
def test_allow_anonymous_safe_access_to_anon_read_only_view(self):
request = factory.get('/', HTTP_AUTHORIZATION='')
response = anon_read_only_root_view(request)
self.assertEqual(response.status_code, status.HTTP_200_OK)
def test_deny_anonymous_unsafe_access_to_anon_read_only_view(self):
request = factory.post('/', {'text': 'foobar'}, format='json',
HTTP_AUTHORIZATION='')
response = anon_read_only_root_view(request)
self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
def test_allow_permitted_safe_access_to_anon_read_only_view(self):
request = factory.get('/', HTTP_AUTHORIZATION=self.permitted_credentials)
response = anon_read_only_root_view(request)
self.assertEqual(response.status_code, status.HTTP_200_OK)
def test_allow_permitted_unsafe_access_to_anon_read_only_view(self):
request = factory.post('/', {'text': 'foobar'}, format='json',
HTTP_AUTHORIZATION=self.permitted_credentials)
response = anon_read_only_root_view(request)
self.assertEqual(response.status_code, status.HTTP_201_CREATED)
def test_deny_disallowed_safe_access_to_anon_read_only_view(self):
request = factory.post('/', HTTP_AUTHORIZATION=self.disallowed_credentials)
response = anon_read_only_root_view(request)
self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)
def test_deny_disallowed_unsafe_to_anon_read_only_view(self):
request = factory.post('/', {'text': 'foobar'}, format='json',
HTTP_AUTHORIZATION=self.disallowed_credentials)
response = anon_read_only_root_view(request)
self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)
class BasicPermModel(models.Model):
text = models.CharField(max_length=100)