From 1df3a850665c1822d6010452c3e3dc7406087686 Mon Sep 17 00:00:00 2001
From: Rob Savoye <rob.savoye@hotosm.org>
Date: Mon, 25 Mar 2024 00:49:30 -0600
Subject: [PATCH] fix: Add test case for roles & permissions

---
 tests/test_roles.py | 104 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 104 insertions(+)
 create mode 100755 tests/test_roles.py

diff --git a/tests/test_roles.py b/tests/test_roles.py
new file mode 100755
index 0000000..63482c4
--- /dev/null
+++ b/tests/test_roles.py
@@ -0,0 +1,104 @@
+#!/usr/bin/python3
+
+# Copyright (c) 2023 Humanitarian OpenStreetMap Team
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as
+# published by the Free Software Foundation, either version 3 of the
+# License, or (at your option) any later version.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Affero General Public License for more details.
+
+# You should have received a copy of the GNU Affero General Public License
+# along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+# Humanitarian OpenStreetmap Team
+# 1100 13th Street NW Suite 800 Washington, D.C. 20005
+# <info@hotosm.org>
+
+import argparse
+import logging
+import sys
+import os
+from sys import argv
+import asyncio
+from codetiming import Timer
+from tm_admin.access import Roles, Operation, Access
+
+# Instantiate logger
+log = logging.getLogger(__name__)
+
+import tm_admin as tma
+rootdir = tma.__path__[0]
+
+async def test_mapper(acl: Access):
+    hits = 0
+    if await acl.check('projects', Roles.MAPPER, Operation.READ):
+        hits += 1
+    if await acl.check('users', Roles.MAPPER, Operation.READ):
+        hits += 1
+    if await acl.check('tasks', Roles.MAPPER, Operation.READ):
+        hits += 1
+    if await acl.check('messages', Roles.MAPPER, Operation.READ):
+        hits += 1
+    if await acl.check('campaigns', Roles.MAPPER, Operation.READ):
+        hits += 1
+    # This is supposed to fail
+    if not await acl.check('campaigns', Roles.MAPPER, Operation.CREATE):
+        hits += 1
+
+    assert hits == 5
+
+async def test_manager(acl: Access):
+    hits = 0
+    if await acl.check('tasks', Roles.PROJECT_MANAGER, Operation.READ):
+        hits += 1
+    if await acl.check('projects', Roles.PROJECT_MANAGER, Operation.UPDATE):
+        hits += 1
+    if await acl.check('users', Roles.PROJECT_MANAGER, Operation.DELETE):
+        hits += 1
+
+    assert hits == 3
+
+async def test_validator(acl: Access):
+    hits = 0
+    if await acl.check('tasks', Roles.VALIDATOR, Operation.READ):
+        hits += 1
+    # This is supossed to fail
+    if not await acl.check('tasks', Roles.VALIDATOR, Operation.DELETE):
+        hits += 1
+
+    assert hits == 2
+
+async def main():
+    parser = argparse.ArgumentParser()
+    parser.add_argument("-v", "--verbose", nargs="?", const="0", help="verbose output")
+    parser.add_argument("-u", "--uri", default='localhost/testdata', help="Database URI")
+    parser.add_argument("-c", "--config", default='tmroles.yaml', help="The config file for this project")
+
+    args = parser.parse_args()
+    # if verbose, dump to the terminal.
+    log_level = os.getenv("LOG_LEVEL", default="INFO")
+    if args.verbose is not None:
+        log_level = logging.DEBUG
+
+    logging.basicConfig(
+        level=log_level,
+        format=("%(asctime)s.%(msecs)03d [%(levelname)s] " "%(name)s | %(funcName)s:%(lineno)d | %(message)s"),
+        datefmt="%y-%m-%d %H:%M:%S",
+        stream=sys.stdout,
+    )
+
+    acl = Access(args.config)
+    await test_mapper(acl)
+    await test_manager(acl)
+    await test_validator(acl)
+    
+if __name__ == "__main__":
+    """This is just a hook so this file can be run standalone during development."""
+    loop = asyncio.new_event_loop()
+    asyncio.set_event_loop(loop)
+    loop.run_until_complete(main())