1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
# -*- coding: utf-8 -*-
# Part of Odoo. See LICENSE file for full copyright and licensing details.
from odoo.addons.utm.tests.common import TestUTMCommon
from odoo.exceptions import AccessError
from odoo.tests.common import tagged, users
@tagged('post_install', '-at_install', 'security', 'utm')
class TestUTMSecurity(TestUTMCommon):
@users('__system__')
def test_utm_security_admin(self):
""" base.group_system members can do anything on main UTM models. """
UtmCampaign = self.env['utm.campaign']
UtmMedium = self.env['utm.medium']
UtmSource = self.env['utm.source']
# CREATE
test_utm_campaign = UtmCampaign.create({'name': 'Campaign ACLs'})
test_utm_medium = UtmMedium.create({'name': 'Medium ACLs'})
test_utm_source = UtmSource.create({'name': 'Source ACLs'})
# READ
self.assertEqual(
UtmCampaign.search([('id', '=', test_utm_campaign.id)]),
test_utm_campaign)
self.assertEqual(
UtmMedium.search([('id', '=', test_utm_medium.id)]),
test_utm_medium)
self.assertEqual(
UtmSource.search([('id', '=', test_utm_source.id)]),
test_utm_source)
# UPDATE
test_utm_campaign.write({'name': 'Campaign EDITED'})
test_utm_medium.write({'name': 'Medium EDITED'})
test_utm_source.write({'name': 'Source EDITED'})
# UNLINK
test_utm_campaign.unlink()
test_utm_medium.unlink()
test_utm_source.unlink()
@users('user_employee_utm')
def test_utm_security_employee(self):
""" base.group_user members can do anything on main UTM models BUT unlink. """
UtmCampaign = self.env['utm.campaign']
UtmMedium = self.env['utm.medium']
UtmSource = self.env['utm.source']
# CREATE
test_utm_campaign = UtmCampaign.create({'name': 'Campaign ACLs'})
test_utm_medium = UtmMedium.create({'name': 'Medium ACLs'})
test_utm_source = UtmSource.create({'name': 'Source ACLs'})
# READ
self.assertEqual(
UtmCampaign.search([('id', '=', test_utm_campaign.id)]),
test_utm_campaign)
self.assertEqual(
UtmMedium.search([('id', '=', test_utm_medium.id)]),
test_utm_medium)
self.assertEqual(
UtmSource.search([('id', '=', test_utm_source.id)]),
test_utm_source)
# UPDATE
test_utm_campaign.write({'name': 'Campaign EDITED'})
test_utm_medium.write({'name': 'Medium EDITED'})
test_utm_source.write({'name': 'Source EDITED'})
# UNLINK
with self.assertRaises(AccessError):
test_utm_campaign.unlink()
with self.assertRaises(AccessError):
test_utm_medium.unlink()
with self.assertRaises(AccessError):
test_utm_source.unlink()
|
