61 lines
2.4 KiB
Python
61 lines
2.4 KiB
Python
from __future__ import annotations
|
|
|
|
import unittest
|
|
|
|
from api_access import required_role
|
|
|
|
|
|
class ApiAccessPolicyTests(unittest.TestCase):
|
|
def test_member_workspaces_are_consistently_protected(self):
|
|
cases = {
|
|
("GET", "/api/screener/setup"): "member",
|
|
("GET", "/api/screener/tracking"): "member",
|
|
("GET", "/api/mentors/messages"): "member",
|
|
("GET", "/api/heaven/setup"): "member",
|
|
("GET", "/api/heaven/readings"): "member",
|
|
("GET", "/api/assistant/messages"): "member",
|
|
("POST", "/api/screener/run"): "member",
|
|
("POST", "/api/screener/tracking"): "member",
|
|
("POST", "/api/screener/tracking/refresh"): "member",
|
|
("POST", "/api/mentors/chat"): "member",
|
|
("POST", "/api/mentors/preferences"): "member",
|
|
("POST", "/api/heaven/interpret"): "member",
|
|
("POST", "/api/assistant/chat"): "member",
|
|
("DELETE", "/api/screener/strategies/42"): "member",
|
|
("DELETE", "/api/screener/tracking/42"): "member",
|
|
("DELETE", "/api/mentors/messages"): "member",
|
|
("DELETE", "/api/assistant/messages"): "member",
|
|
("DELETE", "/api/heaven/readings/42"): "member",
|
|
}
|
|
for (method, path), role in cases.items():
|
|
with self.subTest(method=method, path=path):
|
|
self.assertEqual(required_role(method, path), role)
|
|
|
|
def test_shared_knowledge_mutations_require_admin(self):
|
|
cases = (
|
|
("POST", "/api/reasons"),
|
|
("POST", "/api/seat-aliases"),
|
|
("POST", "/api/heaven/sector-phases"),
|
|
("DELETE", "/api/heaven/sector-phases/油气开采"),
|
|
("POST", "/api/backfill"),
|
|
("GET", "/api/admin/settings"),
|
|
)
|
|
for method, path in cases:
|
|
with self.subTest(method=method, path=path):
|
|
self.assertEqual(required_role(method, path), "admin")
|
|
|
|
def test_personal_market_data_routes_need_login_only(self):
|
|
cases = (
|
|
("GET", "/api/dashboard"),
|
|
("GET", "/api/watchlist"),
|
|
("POST", "/api/notes"),
|
|
("DELETE", "/api/notes/3"),
|
|
)
|
|
for method, path in cases:
|
|
with self.subTest(method=method, path=path):
|
|
self.assertEqual(required_role(method, path), "authenticated")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|