56 lines
2.2 KiB
Python
56 lines
2.2 KiB
Python
import openerp.exceptions
|
|
from openerp.tests.common import TransactionCase
|
|
|
|
class TestRules(TransactionCase):
|
|
def setUp(self):
|
|
super(TestRules, self).setUp()
|
|
|
|
self.id1 = self.env['test_access_right.some_obj']\
|
|
.create({'val': 1}).id
|
|
self.id2 = self.env['test_access_right.some_obj']\
|
|
.create({'val': -1}).id
|
|
# create a global rule forbidding access to records with a negative
|
|
# (or zero) val
|
|
self.env['ir.rule'].create({
|
|
'name': 'Forbid negatives',
|
|
'model_id': self.browse_ref('test_access_rights.model_test_access_right_some_obj').id,
|
|
'domain_force': "[('val', '>', 0)]"
|
|
})
|
|
|
|
def test_basic_access(self):
|
|
env = self.env(user=self.browse_ref('base.public_user'))
|
|
|
|
# put forbidden record in cache
|
|
browse2 = env['test_access_right.some_obj'].browse(self.id2)
|
|
# this is the one we want
|
|
browse1 = env['test_access_right.some_obj'].browse(self.id1)
|
|
|
|
# this should not blow up
|
|
self.assertEqual(browse1.val, 1)
|
|
|
|
# but this should
|
|
with self.assertRaises(openerp.exceptions.AccessError):
|
|
self.assertEqual(browse2.val, -1)
|
|
|
|
def test_many2many(self):
|
|
""" Test assignment of many2many field where rules apply. """
|
|
ids = [self.id1, self.id2]
|
|
|
|
# create container as superuser, connected to all some_objs
|
|
container_admin = self.env['test_access_right.container'].create({'some_ids': [(6, 0, ids)]})
|
|
self.assertItemsEqual(container_admin.some_ids.ids, ids)
|
|
|
|
# check the container as the public user
|
|
container_user = container_admin.sudo(self.browse_ref('base.public_user'))
|
|
self.assertItemsEqual(container_user.some_ids.ids, [self.id1])
|
|
|
|
# this should not fail
|
|
container_user.write({'some_ids': [(6, 0, ids)]})
|
|
self.assertItemsEqual(container_user.some_ids.ids, [self.id1])
|
|
self.assertItemsEqual(container_admin.some_ids.ids, ids)
|
|
|
|
# this removes accessible records only
|
|
container_user.write({'some_ids': [(5,)]})
|
|
self.assertItemsEqual(container_user.some_ids.ids, [])
|
|
self.assertItemsEqual(container_admin.some_ids.ids, [self.id2])
|