server/test/unittest_security.py
changeset 9395 96dba2efd16d
parent 8694 d901c36bcfce
child 9586 121c88b360d0
equal deleted inserted replaced
9394:4b89ca0b11ad 9395:96dba2efd16d
   410             cu.execute("SET X para 'chouette' WHERE X eid %(x)s", {'x': note2.eid})
   410             cu.execute("SET X para 'chouette' WHERE X eid %(x)s", {'x': note2.eid})
   411             self.assertRaises(Unauthorized, self.commit)
   411             self.assertRaises(Unauthorized, self.commit)
   412             note2.cw_adapt_to('IWorkflowable').fire_transition('redoit')
   412             note2.cw_adapt_to('IWorkflowable').fire_transition('redoit')
   413             self.commit()
   413             self.commit()
   414             cu.execute("SET X para 'chouette' WHERE X eid %(x)s", {'x': note2.eid})
   414             cu.execute("SET X para 'chouette' WHERE X eid %(x)s", {'x': note2.eid})
       
   415             self.commit()
       
   416             cu.execute("INSERT Note X: X something 'A'")
       
   417             self.assertRaises(Unauthorized, self.commit)
       
   418             cu.execute("INSERT Note X: X para 'zogzog', X something 'A'")
       
   419             self.commit()
       
   420             note = cu.execute("INSERT Note X").get_entity(0,0)
       
   421             self.commit()
       
   422             note.cw_set(something=u'B')
       
   423             self.commit()
       
   424             note.cw_set(something=None, para=u'zogzog')
   415             self.commit()
   425             self.commit()
   416 
   426 
   417     def test_attribute_read_security(self):
   427     def test_attribute_read_security(self):
   418         # anon not allowed to see users'login, but they can see users
   428         # anon not allowed to see users'login, but they can see users
   419         login_rdef = self.repo.schema['CWUser'].rdef('login')
   429         login_rdef = self.repo.schema['CWUser'].rdef('login')