WangShen007
20fef2b9f3
One word everywhere: ReplyPier in UI copy, package and image names, the replypier.site domains (app/api/docs/help), REPLYPIER_* settings and the --rp-* design tokens. - public widget API is window.ReplyPier with replypierId / replypierBaseUrl / replypierConfig / replypierToken, loader at webclient/replypier.min.js; both bundles rebuilt from source - NOTICE, llms.txt, CONTRIBUTING, HELP_CENTER_INFRA and the demo runtime config rewritten; the demo config ships no third-party keys - migration adds the ReplyPier managed model value to the AI model enum - local compose project, database, role, volume and Docker network carry the same name
231 lines
7.4 KiB
Python
231 lines
7.4 KiB
Python
"""
|
|
Copyright 2024-2026 ReplyPier
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
"""
|
|
|
|
import pytest
|
|
from app.repositories.role import RoleRepository
|
|
from app.models.role import Role
|
|
from app.models.permission import Permission
|
|
from app.models.user import User
|
|
from app.models.organization import Organization
|
|
from uuid import uuid4, UUID
|
|
|
|
@pytest.fixture
|
|
def test_organization(db):
|
|
"""Create a test organization"""
|
|
org = Organization(
|
|
name="Test Organization",
|
|
domain="test.com",
|
|
timezone="UTC"
|
|
)
|
|
db.add(org)
|
|
db.commit()
|
|
db.refresh(org)
|
|
return org
|
|
|
|
@pytest.fixture
|
|
def role_repo(db):
|
|
return RoleRepository(db)
|
|
|
|
@pytest.fixture
|
|
def test_permission(db):
|
|
"""Create a test permission"""
|
|
permission = Permission(name="test_permission", description="Test Permission")
|
|
db.add(permission)
|
|
db.commit()
|
|
db.refresh(permission)
|
|
return permission
|
|
|
|
@pytest.fixture
|
|
def test_role(db, test_organization):
|
|
"""Create a test role"""
|
|
role = Role(
|
|
name="Test Role",
|
|
description="Test Role Description",
|
|
organization_id=test_organization.id,
|
|
is_default=False
|
|
)
|
|
db.add(role)
|
|
db.commit()
|
|
db.refresh(role)
|
|
return role
|
|
|
|
def test_create_role(role_repo, test_organization):
|
|
"""Test creating a new role"""
|
|
created = role_repo.create_role(
|
|
name="New Role",
|
|
description="New Role Description",
|
|
organization_id=test_organization.id,
|
|
is_default=False
|
|
)
|
|
|
|
assert created is not None
|
|
assert created.name == "New Role"
|
|
assert created.description == "New Role Description"
|
|
assert created.organization_id == test_organization.id
|
|
assert created.is_default is False
|
|
|
|
def test_create_role_with_permissions(role_repo, test_organization, test_permission):
|
|
"""Test creating a role with permissions"""
|
|
created = role_repo.create_role(
|
|
name="Role With Permissions",
|
|
description="Role With Permissions Description",
|
|
organization_id=test_organization.id,
|
|
permission_ids=[test_permission.id]
|
|
)
|
|
|
|
assert created is not None
|
|
assert len(created.permissions) == 1
|
|
assert created.permissions[0].id == test_permission.id
|
|
|
|
def test_get_role(role_repo, test_role):
|
|
"""Test retrieving a role by ID"""
|
|
role = role_repo.get_role(test_role.id)
|
|
assert role is not None
|
|
assert role.id == test_role.id
|
|
assert role.name == test_role.name
|
|
|
|
def test_get_org_roles(role_repo, test_role):
|
|
"""Test retrieving all roles for an organization"""
|
|
roles = role_repo.get_org_roles(test_role.organization_id)
|
|
assert len(roles) == 1
|
|
assert roles[0].id == test_role.id
|
|
|
|
def test_update_role(role_repo, test_role):
|
|
"""Test updating role details"""
|
|
updated = role_repo.update_role(
|
|
test_role.id,
|
|
name="Updated Role",
|
|
description="Updated Description"
|
|
)
|
|
|
|
assert updated is not None
|
|
assert updated.name == "Updated Role"
|
|
assert updated.description == "Updated Description"
|
|
|
|
def test_update_role_permissions(role_repo, test_role, test_permission):
|
|
"""Test updating role permissions"""
|
|
updated = role_repo.update_role(
|
|
test_role.id,
|
|
permissions=[{"id": test_permission.id}]
|
|
)
|
|
|
|
assert updated is not None
|
|
assert len(updated.permissions) == 1
|
|
assert updated.permissions[0].id == test_permission.id
|
|
|
|
def test_update_nonexistent_role(role_repo):
|
|
"""Test updating a nonexistent role"""
|
|
updated = role_repo.update_role(999, name="Updated Role")
|
|
assert updated is None
|
|
|
|
def test_delete_role(role_repo, test_role):
|
|
"""Test deleting a role"""
|
|
success = role_repo.delete_role(test_role.id)
|
|
assert success is True
|
|
|
|
# Verify deletion
|
|
role = role_repo.get_role(test_role.id)
|
|
assert role is None
|
|
|
|
def test_delete_nonexistent_role(role_repo):
|
|
"""Test deleting a nonexistent role"""
|
|
success = role_repo.delete_role(999)
|
|
assert success is False
|
|
|
|
def test_add_permission(role_repo, test_role, test_permission):
|
|
"""Test adding a permission to a role"""
|
|
success = role_repo.add_permission(test_role.id, test_permission.name)
|
|
assert success is True
|
|
|
|
# Verify permission was added
|
|
role = role_repo.get_role(test_role.id)
|
|
assert len(role.permissions) == 1
|
|
assert role.permissions[0].id == test_permission.id
|
|
|
|
def test_add_nonexistent_permission(role_repo, test_role):
|
|
"""Test adding a nonexistent permission to a role"""
|
|
success = role_repo.add_permission(test_role.id, "nonexistent_permission")
|
|
assert success is False
|
|
|
|
def test_remove_permission(role_repo, test_role, test_permission, db):
|
|
"""Test removing a permission from a role"""
|
|
# First add the permission
|
|
test_role.permissions.append(test_permission)
|
|
db.commit()
|
|
|
|
success = role_repo.remove_permission(test_role.id, test_permission.name)
|
|
assert success is True
|
|
|
|
# Verify permission was removed
|
|
role = role_repo.get_role(test_role.id)
|
|
assert len(role.permissions) == 0
|
|
|
|
def test_remove_nonexistent_permission(role_repo, test_role):
|
|
"""Test removing a nonexistent permission from a role"""
|
|
success = role_repo.remove_permission(test_role.id, "nonexistent_permission")
|
|
assert success is False
|
|
|
|
def test_get_role_permissions(role_repo, test_role, test_permission, db):
|
|
"""Test getting all permissions for a role"""
|
|
# Add permission to role
|
|
test_role.permissions.append(test_permission)
|
|
db.commit()
|
|
|
|
permissions = role_repo.get_role_permissions(test_role.id)
|
|
assert len(permissions) == 1
|
|
assert permissions[0] == test_permission.name
|
|
|
|
def test_get_roles_by_organization(role_repo, test_role):
|
|
"""Test getting all roles in an organization"""
|
|
roles = role_repo.get_roles_by_organization(test_role.organization_id)
|
|
assert len(roles) == 1
|
|
assert roles[0].id == test_role.id
|
|
|
|
def test_get_default_role(role_repo, test_organization, db):
|
|
"""Test getting the default role for an organization"""
|
|
default_role = Role(
|
|
name="Default Role",
|
|
description="Default Role Description",
|
|
organization_id=test_organization.id,
|
|
is_default=True
|
|
)
|
|
db.add(default_role)
|
|
db.commit()
|
|
|
|
role = role_repo.get_default_role(test_organization.id)
|
|
assert role is not None
|
|
assert role.is_default is True
|
|
assert role.name == "Default Role"
|
|
|
|
def test_is_role_in_use(role_repo, test_role, test_organization, db):
|
|
"""Test checking if a role is assigned to any users"""
|
|
# Create a test user with the role
|
|
user = User(
|
|
email="test@example.com",
|
|
hashed_password="hashed_password",
|
|
organization_id=test_organization.id,
|
|
role_id=test_role.id
|
|
)
|
|
db.add(user)
|
|
db.commit()
|
|
|
|
in_use = role_repo.is_role_in_use(test_role.id)
|
|
assert in_use is True
|
|
|
|
def test_is_role_not_in_use(role_repo, test_role):
|
|
"""Test checking if an unused role is in use"""
|
|
in_use = role_repo.is_role_in_use(test_role.id)
|
|
assert in_use is False |