90 lines
2.5 KiB
JavaScript
90 lines
2.5 KiB
JavaScript
const test = require('../testlib');
|
|
|
|
test.run(async function () {
|
|
await test('admin', async function (assert, req) {
|
|
//Test paging
|
|
var res = await req({
|
|
url: '/users/2/permissions?pagesize=1&page=2',
|
|
method: 'get'
|
|
});
|
|
|
|
assert.equal(res.status, 200, 'Status should be OK');
|
|
assert.equal(res.data.paging, {
|
|
page: 2,
|
|
total: 2,
|
|
pagesize: 1
|
|
}, 'Paging data fail for ' + res.config.url);
|
|
assert.equal(res.data.results.length, 1, "Should be 1 results.");
|
|
|
|
var res = await req({
|
|
url: '/users/2/permissions',
|
|
method: 'get'
|
|
});
|
|
|
|
assert.equal(res.status, 200, 'Get of permissions should be OK');
|
|
assert.equal(res.data.results, [
|
|
{
|
|
domainId: '1',
|
|
domainName: 'example.com'
|
|
},
|
|
{
|
|
domainId: '2',
|
|
domainName: 'slave.example.net'
|
|
}
|
|
], 'Get permissions result fail');
|
|
|
|
//Add permission with missing field
|
|
var res = await req({
|
|
url: '/users/2/permissions',
|
|
method: 'post',
|
|
data: {
|
|
foo: 100
|
|
}
|
|
});
|
|
|
|
assert.equal(res.status, 422, 'Add of permission should fail for missing field.');
|
|
|
|
//Add permission which exists
|
|
var res = await req({
|
|
url: '/users/2/permissions',
|
|
method: 'post',
|
|
data: {
|
|
domainId: 1
|
|
}
|
|
});
|
|
|
|
assert.equal(res.status, 204, 'Add of permission should succeed for existing permission.');
|
|
|
|
//Add permission which does not exist
|
|
var res = await req({
|
|
url: '/users/2/permissions',
|
|
method: 'post',
|
|
data: {
|
|
domainId: 3
|
|
}
|
|
});
|
|
|
|
assert.equal(res.status, 204, 'Add of permission should succeed for not existing permission.');
|
|
|
|
|
|
});
|
|
|
|
await test('user', async function (assert, req) {
|
|
var res = await req({
|
|
url: '/users/2/permissions',
|
|
method: 'get'
|
|
});
|
|
|
|
assert.equal(res.status, 403, 'Get of permissions should fail for user.');
|
|
|
|
var res = await req({
|
|
url: '/users/2/permissions',
|
|
method: 'post',
|
|
data: {
|
|
domainId: 100
|
|
}
|
|
});
|
|
|
|
assert.equal(res.status, 403, 'Add of permission should fail for user.');
|
|
});
|
|
}); |