-
Notifications
You must be signed in to change notification settings - Fork 3.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
add RBAC tests for schedules on inventory and project updates #6240
add RBAC tests for schedules on inventory and project updates #6240
Conversation
266ed51
to
88e5518
Compare
assert 'POST' in options(url, user=alice).data['actions'].keys() | ||
post(url, params, alice, expect=201) | ||
|
||
# can't create a schedule on JT2 because we don't have execute rights | ||
jt2 = JobTemplate.objects.create( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@AlanCoding mentioned in a prior view, explicitly testing this jt2
is sort of extraneous
88e5518
to
ad1a7fc
Compare
assert 'POST' not in options(url, user=alice).data['actions'].keys() | ||
post(url, params, alice, expect=403) | ||
|
||
# use role does *not* grant the ability to schedule |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
man, that is subtle.
It would allow for creation of schedules of ad hoc commands. That's just not a thing.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
no, that's not use role, that would be ad_hoc role I was thinking of. Yeah, use is just for using in JTs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I gladly approve PR of only tests.
Build succeeded.
|
Build succeeded (gate pipeline).
|
[Backport 4.3] Fixes 'Not Found' error on looking up credentials
No description provided.