Initial commit: Test packages

odoo-bringout-oca-ocb-test_mail/test_mail/tests/test_mail_security.py

@@ -0,0 +1,29 @@
+# -*- coding: utf-8 -*-
+# Part of Odoo. See LICENSE file for full copyright and licensing details.
+
+from odoo.addons.mail.tests.common import mail_new_test_user
+from odoo.addons.test_mail.tests.common import TestMailCommon
+from odoo.exceptions import AccessError
+
+
+class TestSubtypeAccess(TestMailCommon):
+
+    def test_subtype_access(self):
+        """
+        The function aims to formally verify the access restrictions on mail.message.subtype for
+        normal and admin users. It ensures that normal users are unable to modify it,
+        while admin users possess the necessary privileges to modify it successfully.
+        """
+
+        test_subtype = self.env['mail.message.subtype'].create({
+            'name': 'Test',
+            'description': 'only description',
+        })
+
+        user = mail_new_test_user(self.env, 'Internal user', groups='base.group_user')
+
+        with self.assertRaises(AccessError):
+            test_subtype.with_user(user).write({'description': 'changing description'})
+
+        test_subtype.with_user(self.user_admin).write({'description': 'testing'})
+        self.assertEqual(test_subtype.description, 'testing')