about summary refs log tree commit diff
path: root/gn_auth/templates/admin/dashboard.html
diff options
context:
space:
mode:
authorClaude Sonnet 4.62026-08-28 19:30:00 +0000
committerFrederick Muriuki Muriithi2026-08-28 14:38:08 -0500
commit3348d266228e1f4b374d0af6e33fe4948eb1bfaa (patch)
tree7c6bf3f9e1fcdde94ddcde69118cbddbe71f2e48 /gn_auth/templates/admin/dashboard.html
parentd9b8803bd808a338a72b03aa55932c8d589892d8 (diff)
downloadgn-auth-3348d266228e1f4b374d0af6e33fe4948eb1bfaa.tar.gz
Add unit tests for system admin resource-ownership endpoints
Four tests covering the two new endpoints added in the previous commit:

  POST /auth/system/administration/resources/<id>/assign-owner
  POST /auth/system/administration/resources/<id>/revoke-owner

Tests:
  - assign-owner returns 401 when no Authorization header is sent
  - revoke-owner returns 401 when no Authorization header is sent
  - assign-owner returns 403 for a user without system:resource:assign-owner
  - revoke-owner returns 403 for a user without system:resource:assign-owner

The 401 tests exercise the @require_oauth decorator directly.  The 403 tests
mock require_oauth.acquire (same pattern as test_admin_user_roles.py) and use
unaff@iliated.user (TEST_USERS[3]) who has no roles and therefore no
system:resource:assign-owner privilege on the system resource.

Reviewed-By: Frederick M. Muriithi <fredmanglis@gmail.com>
Diffstat (limited to 'gn_auth/templates/admin/dashboard.html')
0 files changed, 0 insertions, 0 deletions