Merge remote-tracking branch 'upstream/develop' into fix/course-deletion
This commit is contained in:
@@ -11,24 +11,16 @@ class TestAuth(FrappeAPITestCase, BaseTestUtils):
|
||||
self.normal_user = self._create_user("normal-user@example.com", "Normal", "User", ["LMS Student"])
|
||||
|
||||
def test_allowed_path(self):
|
||||
site_url = frappe.utils.get_site_url(frappe.local.site)
|
||||
headers = {"Authorization": "Bearer set_test_example_user"}
|
||||
url = site_url + "/api/method/lms.lms.utils.get_courses"
|
||||
response = self.get(
|
||||
url,
|
||||
headers=headers,
|
||||
)
|
||||
self.assertNotEqual(response.json.get("exc_type"), "PermissionError")
|
||||
frappe.form_dict.cmd = "ping"
|
||||
frappe.session.user = self.normal_user.name
|
||||
authenticate()
|
||||
frappe.session.user = "Administrator"
|
||||
|
||||
def test_not_allowed_path(self):
|
||||
site_url = frappe.utils.get_site_url(frappe.local.site)
|
||||
headers = {"Authorization": "Bearer set_test_example_user"}
|
||||
url = site_url + "/api/method/frappe.auth.get_logged_user"
|
||||
response = self.get(
|
||||
url,
|
||||
headers=headers,
|
||||
)
|
||||
self.assertEqual(response.json.get("exc_type"), "PermissionError")
|
||||
frappe.form_dict.cmd = "frappe.auth.get_logged_user"
|
||||
frappe.session.user = self.normal_user.name
|
||||
self.assertRaises(frappe.PermissionError, authenticate)
|
||||
frappe.session.user = "Administrator"
|
||||
|
||||
def tearDown(self):
|
||||
BaseTestUtils.tearDown(self)
|
||||
|
||||
Reference in New Issue
Block a user