44f261e269
Curatare globala a comentariilor si docstring-urilor (app, tools, teste, scripturi): eliminate referintele la PRD-uri, US-xxx, task-uri istorice si review-uri; pastrata doar informatia functionala, formulata scurt. Regula adaugata in CLAUDE.md (sectiunea Stil). Fara modificari de cod sau comportament. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
55 lines
1.6 KiB
Python
55 lines
1.6 KiB
Python
"""Linkul 'Panou admin' apare pe dashboard doar pentru admini.
|
|
|
|
Adminul trebuie sa poata descoperi /admin din UI, nu doar prin URL direct.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
import tempfile
|
|
|
|
import pytest
|
|
from fastapi.testclient import TestClient
|
|
|
|
|
|
@pytest.fixture()
|
|
def env(monkeypatch):
|
|
tmp = tempfile.mkdtemp()
|
|
monkeypatch.setenv("AUTOPASS_DB_PATH", os.path.join(tmp, "t.db"))
|
|
from app.config import get_settings
|
|
get_settings.cache_clear()
|
|
from app.main import app
|
|
with TestClient(app, follow_redirects=False) as c:
|
|
from app.db import get_connection
|
|
conn = get_connection()
|
|
yield c, conn
|
|
conn.close()
|
|
get_settings.cache_clear()
|
|
|
|
|
|
def _account_with_user(conn, name, *, is_admin):
|
|
from app.accounts import create_account
|
|
from app.users import create_user
|
|
acct = create_account(conn, name)
|
|
email = f"{name.replace(' ', '').lower()}@test.ro"
|
|
create_user(conn, acct, email, "parolaSuperSecreta", is_admin=is_admin)
|
|
return acct
|
|
|
|
|
|
def test_admin_vede_link_panou_admin(env, monkeypatch):
|
|
client, conn = env
|
|
acct = _account_with_user(conn, "Admin Co", is_admin=True)
|
|
monkeypatch.setattr("app.web.routes.require_login", lambda r: acct)
|
|
r = client.get("/")
|
|
assert r.status_code == 200
|
|
assert 'href="/admin"' in r.text
|
|
|
|
|
|
def test_non_admin_nu_vede_link(env, monkeypatch):
|
|
client, conn = env
|
|
acct = _account_with_user(conn, "Service Normal", is_admin=False)
|
|
monkeypatch.setattr("app.web.routes.require_login", lambda r: acct)
|
|
r = client.get("/")
|
|
assert r.status_code == 200
|
|
assert 'href="/admin"' not in r.text
|