diff --git a/test/unit/managers/test_DatasetManager.py b/test/unit/managers/test_DatasetManager.py index 0cc0a7b2b47..ed2d8737513 100644 --- a/test/unit/managers/test_DatasetManager.py +++ b/test/unit/managers/test_DatasetManager.py @@ -117,6 +117,11 @@ class DatasetManagerTestCase( BaseTestCase ): self.log( "a dataset without permissions should be accessible by an admin" ) self.assertTrue( self.dataset_manager.permissions.access.is_permitted( dataset, self.admin_user ) ) + self.log( "a dataset without permissions shouldn't be manageable by an anonymous user" ) + self.assertFalse( self.dataset_manager.permissions.manage.is_permitted( dataset, None ) ) + self.log( "a dataset without permissions should be accessible by an anonymous user" ) + self.assertTrue( self.dataset_manager.permissions.access.is_permitted( dataset, None ) ) + def test_create_public_dataset( self ): self.log( "should be able to create a new Dataset and give it some permissions that actually, you know, " "might work if there's any justice in this universe" ) @@ -145,6 +150,11 @@ class DatasetManagerTestCase( BaseTestCase ): self.log( "a public dataset should be accessible by an admin" ) self.assertTrue( self.dataset_manager.permissions.access.is_permitted( dataset, self.admin_user ) ) + self.log( "a public dataset shouldn't be manageable by an anonymous user" ) + self.assertFalse( self.dataset_manager.permissions.manage.is_permitted( dataset, None ) ) + self.log( "a public dataset should be accessible by an anonymous user" ) + self.assertTrue( self.dataset_manager.permissions.access.is_permitted( dataset, None ) ) + def test_create_private_dataset( self ): self.log( "should be able to create a new Dataset and give it private permissions" ) owner = self.user_manager.create( **user2_data ) @@ -177,6 +187,11 @@ class DatasetManagerTestCase( BaseTestCase ): self.log( "a private dataset should be accessible by an admin" ) self.assertTrue( self.dataset_manager.permissions.access.is_permitted( dataset, self.admin_user ) ) + self.log( "a private dataset shouldn't be manageable by an anonymous user" ) + self.assertFalse( self.dataset_manager.permissions.manage.is_permitted( dataset, None ) ) + self.log( "a private dataset shouldn't be accessible by an anonymous user" ) + self.assertFalse( self.dataset_manager.permissions.access.is_permitted( dataset, None ) ) + # ============================================================================= class DatasetRBACPermissionsTestCase( BaseTestCase ):