diff options
| author | Claude Sonnet 4.6 | 2026-08-28 19:30:00 +0000 |
|---|---|---|
| committer | Frederick Muriuki Muriithi | 2026-08-28 14:38:08 -0500 |
| commit | 3348d266228e1f4b374d0af6e33fe4948eb1bfaa (patch) | |
| tree | 7c6bf3f9e1fcdde94ddcde69118cbddbe71f2e48 /gn_auth/templates/admin/dashboard.html | |
| parent | d9b8803bd808a338a72b03aa55932c8d589892d8 (diff) | |
| download | gn-auth-3348d266228e1f4b374d0af6e33fe4948eb1bfaa.tar.gz | |
Add unit tests for system admin resource-ownership endpoints
Four tests covering the two new endpoints added in the previous commit: POST /auth/system/administration/resources/<id>/assign-owner POST /auth/system/administration/resources/<id>/revoke-owner Tests: - assign-owner returns 401 when no Authorization header is sent - revoke-owner returns 401 when no Authorization header is sent - assign-owner returns 403 for a user without system:resource:assign-owner - revoke-owner returns 403 for a user without system:resource:assign-owner The 401 tests exercise the @require_oauth decorator directly. The 403 tests mock require_oauth.acquire (same pattern as test_admin_user_roles.py) and use unaff@iliated.user (TEST_USERS[3]) who has no roles and therefore no system:resource:assign-owner privilege on the system resource. Reviewed-By: Frederick M. Muriithi <fredmanglis@gmail.com>
Diffstat (limited to 'gn_auth/templates/admin/dashboard.html')
0 files changed, 0 insertions, 0 deletions
