1
0
mirror of https://github.com/haiwen/seahub.git synced 2025-09-02 07:27:04 +00:00

admin api role check (#4353)

* admin api role check

* add check to new tabs and tests

* fix work-weixin virus scan check
This commit is contained in:
Leo
2019-12-16 18:31:29 +08:00
committed by lian
parent 44459bb36b
commit 7df1192cbf
84 changed files with 1089 additions and 142 deletions

View File

@@ -18,6 +18,13 @@ class AdminAbuseReportsTest(BaseTestCase):
resp = self.client.get(self.url)
self.assertEqual(200, resp.status_code)
@patch('seahub.api2.endpoints.admin.abuse_reports.ENABLE_SHARE_LINK_REPORT_ABUSE', MagicMock(return_value=True))
def test_no_permission(self):
self.logout()
self.login_as(self.admin_no_other_permission)
resp = self.client.get(self.url)
self.assertEqual(403, resp.status_code)
class AdminAbuseReportTest(BaseTestCase):
def setUp(self):
@@ -42,6 +49,15 @@ class AdminAbuseReportTest(BaseTestCase):
report = AbuseReport.objects.get(id=report_id)
report.delete()
@patch('seahub.api2.endpoints.admin.abuse_reports.ENABLE_SHARE_LINK_REPORT_ABUSE', MagicMock(return_value=True))
def test_no_permission(self):
self.logout()
self.login_as(self.admin_no_other_permission)
report = self._add_abuse_report()
data = 'handled=' + str(not report.handled).lower()
resp = self.client.put(self.url + str(report.id) + '/', data, 'application/x-www-form-urlencoded')
self.assertEqual(403, resp.status_code)
@patch('seahub.api2.endpoints.admin.abuse_reports.ENABLE_SHARE_LINK_REPORT_ABUSE', MagicMock(return_value=True))
def test_can_put(self):
report = self._add_abuse_report()