GlitchTip/user_reports/tests/test_api_permissions.py

from django.urls import reverse
from model_bakery import baker
from glitchtip.test_utils.test_case import APIPermissionTestCase


class UserReportAPIPermissionTests(APIPermissionTestCase):
    def setUp(self):
        self.create_user_org()
        self.set_client_credentials(self.auth_token.token)
        self.team = baker.make("teams.Team", organization=self.organization)
        self.team.members.add(self.org_user)
        self.project = baker.make("projects.Project", organization=self.organization)
        self.project.team_set.add(self.team)
        self.issue = baker.make("issues.Issue", project=self.project)
        self.user_report = baker.make(
            "user_reports.UserReport", project=self.project, issue=self.issue
        )
        self.list_url = reverse(
            "issue-user-reports-list", kwargs={"issue_pk": self.issue.pk}
        )
        self.detail_url = reverse(
            "issue-user-reports-detail",
            kwargs={"issue_pk": self.issue.pk, "pk": self.user_report.pk},
        )

    def test_list(self):
        self.assertGetReqStatusCode(self.list_url, 403)
        self.auth_token.add_permission("event:read")
        self.assertGetReqStatusCode(self.list_url, 200)

    def test_retrieve(self):
        self.assertGetReqStatusCode(self.detail_url, 403)
        self.auth_token.add_permission("event:read")
        self.assertGetReqStatusCode(self.detail_url, 200)