[book] more about has_<action>_permission and enhance a bit security definition section
fromlogilab.common.testlibimportTestCase,unittest_main,tagfromcubicweb.devtools.httptestimportCubicWebServerTCimporthttplibfromosimportpathasospclassTwistedCWAnonTC(CubicWebServerTC):deftest_response(self):try:response=self.web_get()excepthttplib.NotConnected,ex:self.fail("Can't connection to test server: %s"%ex)deftest_response_anon(self):response=self.web_get()self.assertEquals(response.status,httplib.OK)deftest_base_url(self):ifself.test_urlnotinself.web_get().read():self.fail('no mention of base url in retrieved page')classTwistedCWIdentTC(CubicWebServerTC):anonymous_logged=Falsedeftest_response_denied(self):response=self.web_get()self.assertEquals(response.status,httplib.FORBIDDEN)deftest_login(self):response=self.web_get()ifresponse.status!=httplib.FORBIDDEN:self.skip('Already authenticated')# loginself.web_login(self.admlogin,self.admpassword)response=self.web_get()self.assertEquals(response.status,httplib.OK)# logoutself.web_logout()response=self.web_get()self.assertEquals(response.status,httplib.FORBIDDEN)if__name__=='__main__':unittest_main()