canaille-globuzma/tests/backends/ldap/test_permissions.py
2024-04-07 09:33:56 +02:00

20 lines
520 B
Python

def test_group_permissions_by_dn(testclient, user, foo_group):
assert not user.can_manage_users
testclient.app.config["CANAILLE"]["ACL"]["ADMIN"]["FILTER"] = {
"groups": foo_group.dn
}
user.reload()
assert user.can_manage_users
def test_group_permissions_str(testclient, user, foo_group):
assert not user.can_manage_users
testclient.app.config["CANAILLE"]["ACL"]["ADMIN"]["FILTER"] = (
f"memberOf={foo_group.dn}"
)
user.reload()
assert user.can_manage_users