52 lines
1.7 KiB
Python
52 lines
1.7 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo import exceptions
|
|
from odoo.addons.mail.tests.common import MailCommon, mail_new_test_user
|
|
from odoo.addons.room.tests.common import RoomCommon
|
|
from odoo.tests.common import tagged, users
|
|
|
|
@tagged("room_acl")
|
|
class TestRoomSecurity(RoomCommon, MailCommon):
|
|
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
super().setUpClass()
|
|
cls.room_manager = mail_new_test_user(
|
|
cls.env,
|
|
groups='room.group_room_manager',
|
|
login='room_manager',
|
|
name='Room Manager',
|
|
)
|
|
|
|
cls.public_user = mail_new_test_user(
|
|
cls.env,
|
|
groups='base.group_public',
|
|
login='public_user',
|
|
name='Public user',
|
|
)
|
|
|
|
@users('public_user')
|
|
def test_models_as_public(self):
|
|
# Booking
|
|
with self.assertRaises(exceptions.AccessError, msg="ACLs: No Booking access to public"):
|
|
self.env["room.booking"].search([])
|
|
|
|
# Office
|
|
with self.assertRaises(exceptions.AccessError, msg="ACLs: No Office access to public"):
|
|
self.env["room.office"].search([])
|
|
|
|
# Room
|
|
with self.assertRaises(exceptions.AccessError, msg="ACLs: No Room access to public"):
|
|
self.env["room.room"].search([])
|
|
|
|
@users('employee')
|
|
def test_models_as_employee(self):
|
|
# Office
|
|
with self.assertRaises(exceptions.AccessError, msg="ACLs: Readonly access on office"):
|
|
self.office.with_env(self.env).write({"name": "Office 2"})
|
|
|
|
# Room
|
|
with self.assertRaises(exceptions.AccessError, msg="ACLs: Readonly access on room"):
|
|
self.rooms[0].with_env(self.env).write({"name": "Room 2"})
|