# Part of Odoo. See LICENSE file for full copyright and licensing details. import unittest import odoo.tests from odoo.tools import mute_logger from odoo.addons.website.tests.common import HttpCaseWithWebsiteUser @odoo.tests.common.tagged('post_install', '-at_install') class TestRestrictedEditor(HttpCaseWithWebsiteUser): @classmethod def setUpClass(cls): super().setUpClass() website = cls.env['website'].search([], limit=1) fr = cls.env.ref('base.lang_fr').sudo() en = cls.env.ref('base.lang_en').sudo() fr.active = True website.default_lang_id = en website.language_ids = en + fr cls.env['website.menu'].create({ 'name': 'Model item', 'url': '/test_website/model_item/1', 'parent_id': website.menu_id.id, 'sequence': 100, }) @mute_logger('odoo.addons.http_routing.models.ir_http', 'odoo.http') def test_01_restricted_editor_only(self): self.start_tour(self.env['website'].get_client_action_url('/'), 'test_restricted_editor_only', login="website_user") @mute_logger('odoo.addons.http_routing.models.ir_http', 'odoo.http') def test_02_restricted_editor_test_admin(self): self.user_website_user.group_ids += self.env.ref("test_website.group_test_website_admin") self.start_tour(self.env['website'].get_client_action_url('/'), 'test_restricted_editor_test_admin', login="website_user") # FIXME the logic of the commit that introduced the fix at 8c41c147a4c6a415e # was reverted, so this test is disabled for now. Branding *on views* as # a restricted editor is something we want in some custo (e.g. odoo.com). # See commit messages for details. @unittest.skip @mute_logger('odoo.addons.http_routing.models.ir_http', 'odoo.http') def test_03_restricted_editor_tester(self): """ Tests that restricted users cannot edit ir.ui.view records despite being on a page of a record (main_object) they can edit. """ self.user_website_user.group_ids += self.env.ref("test_website.group_test_website_tester") self.start_tour(self.env['website'].get_client_action_url('/test_model/1'), 'test_restricted_editor_tester', login='website_user')