Load default roles and types

Author: Ken Lippold

iam/migrations/0009_create_default_roles_and_types.py

@@ -0,0 +1,19 @@
+# Generated by Django 5.2b1 on 2025-02-27 18:38
+
+from django.db import migrations
+from django.core.management import call_command
+
+
+def load_fixtures(apps, schema_editor):
+    call_command("loaddata", "iam/fixtures/default_roles.json")
+    call_command("loaddata", "iam/fixtures/default_types.json")
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("iam", "0008_alter_collaborator_role_alter_collaborator_user_and_more"),
+    ]
+
+    operations = [
+        migrations.RunPython(load_fixtures),
+    ]

tests/fixtures/test_collaborators.yaml

@@ -3,29 +3,29 @@
   pk: 1000000010
   fields:
     user: 1000000011
-    role: a7701d22-e716-4584-a18c-055c8c4f2bd6
+    role: 2f05f775-5d8a-4778-9942-3d13a64ec7a3
     workspace: 6e0deaf2-a92b-421b-9ece-86783265596f
 
 # Public Workspace Viewer
 - model: iam.collaborator
   pk: 1000000011
   fields:
     user: 1000000012
-    role: 702e2156-baee-451a-b7ee-dca8baeda378
+    role: 1d91bff7-edf6-4b69-bb26-674436335725
     workspace: 6e0deaf2-a92b-421b-9ece-86783265596f
 
 # Private Workspace Editor
 - model: iam.collaborator
   pk: 1000000012
   fields:
     user: 1000000011
-    role: a7701d22-e716-4584-a18c-055c8c4f2bd6
+    role: 2f05f775-5d8a-4778-9942-3d13a64ec7a3
     workspace: b27c51a0-7374-462d-8a53-d97d47176c10
 
 # Private Workspace Viewer
 - model: iam.collaborator
   pk: 1000000013
   fields:
     user: 1000000012
-    role: 702e2156-baee-451a-b7ee-dca8baeda378
+    role: 1d91bff7-edf6-4b69-bb26-674436335725
     workspace: b27c51a0-7374-462d-8a53-d97d47176c10

tests/fixtures/test_roles.yaml

@@ -1,33 +1,3 @@
-# Editor Role
-- model: iam.role
-  pk: a7701d22-e716-4584-a18c-055c8c4f2bd6
-  fields:
-    name: "Editor"
-    description: "Editor"
-
-# Editor Permissions
-- model: iam.permission
-  pk: 1000000010
-  fields:
-    role: a7701d22-e716-4584-a18c-055c8c4f2bd6
-    permission_type: "*"
-    resource_type: "*"
-
-# Viewer Role
-- model: iam.role
-  pk: 702e2156-baee-451a-b7ee-dca8baeda378
-  fields:
-    name: "Viewer"
-    description: "Viewer"
-
-# Viewer Permissions
-- model: iam.permission
-  pk: 1000000011
-  fields:
-    role: 702e2156-baee-451a-b7ee-dca8baeda378
-    permission_type: "view"
-    resource_type: "*"
-
 # Private Role
 - model: iam.role
   pk: 60b9d8b1-28d1-4d0d-9bee-4e47219d0118

tests/iam/services/test_collaborator.py

@@ -32,17 +32,17 @@ def test_list_collaborator(get_user, user, workspace, message, error_code):
 
 
 @pytest.mark.parametrize("user, collaborator, workspace, role, message, error_code", [
-    ("owner", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", None, None),
-    ("admin", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", None, None),
+    ("owner", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", None, None),
+    ("admin", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", None, None),
     ("owner", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "60b9d8b1-28d1-4d0d-9bee-4e47219d0118", None, None),
-    ("owner", "limited", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", None, None),
-    ("editor", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", None, None),
-    ("viewer", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "You do not have permission", 403),
-    ("anonymous", "anonymous", "6e0deaf2-a92b-421b-9ece-86783265596f", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "You do not have permission", 403),
-    ("anonymous", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "Workspace does not exist", 404),
-    ("owner", "fake", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "No account with email", 400),
-    ("owner", "owner", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "Account with email", 400),
-    ("owner", "viewer", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "Account with email", 400),
+    ("owner", "limited", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", None, None),
+    ("editor", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", None, None),
+    ("viewer", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "You do not have permission", 403),
+    ("anonymous", "anonymous", "6e0deaf2-a92b-421b-9ece-86783265596f", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "You do not have permission", 403),
+    ("anonymous", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "Workspace does not exist", 404),
+    ("owner", "fake", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "No account with email", 400),
+    ("owner", "owner", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "Account with email", 400),
+    ("owner", "viewer", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "Account with email", 400),
     ("owner", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "00000000-0000-0000-0000-000000000000", "Role does not exist", 404),
     ("owner", "anonymous", "6e0deaf2-a92b-421b-9ece-86783265596f", "60b9d8b1-28d1-4d0d-9bee-4e47219d0118", "Role does not exist", 404),
 ])
@@ -65,15 +65,15 @@ def test_create_collaborator(get_user, user, collaborator, workspace, role, mess
 
 
 @pytest.mark.parametrize("user, collaborator, workspace, role, message, error_code", [
-    ("owner", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", None, None),
-    ("admin", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", None, None),
+    ("owner", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", None, None),
+    ("admin", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", None, None),
     ("owner", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "60b9d8b1-28d1-4d0d-9bee-4e47219d0118", None, None),
-    ("editor", "viewer", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", None, None),
-    ("viewer", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "You do not have permission", 403),
-    ("anonymous", "editor", "6e0deaf2-a92b-421b-9ece-86783265596f", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "You do not have permission", 403),
-    ("anonymous", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "Workspace does not exist", 404),
-    ("owner", "fake", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "No collaborator with email", 400),
-    ("owner", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "No collaborator with email", 400),
+    ("editor", "viewer", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", None, None),
+    ("viewer", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "You do not have permission", 403),
+    ("anonymous", "editor", "6e0deaf2-a92b-421b-9ece-86783265596f", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "You do not have permission", 403),
+    ("anonymous", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "Workspace does not exist", 404),
+    ("owner", "fake", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "No collaborator with email", 400),
+    ("owner", "anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "No collaborator with email", 400),
     ("owner", "editor", "b27c51a0-7374-462d-8a53-d97d47176c10", "00000000-0000-0000-0000-000000000000", "Role does not exist", 404),
     ("owner", "editor", "6e0deaf2-a92b-421b-9ece-86783265596f", "60b9d8b1-28d1-4d0d-9bee-4e47219d0118", "Role does not exist", 404),
 ])

tests/iam/services/test_role.py

@@ -38,7 +38,7 @@ def test_list_role(get_user, user, workspace, length, message, error_code):
 @pytest.mark.parametrize("user, workspace, role, message, error_code", [
     ("owner", "b27c51a0-7374-462d-8a53-d97d47176c10", "60b9d8b1-28d1-4d0d-9bee-4e47219d0118", "Private", None),
     ("admin", "b27c51a0-7374-462d-8a53-d97d47176c10", "60b9d8b1-28d1-4d0d-9bee-4e47219d0118", "Private", None),
-    ("anonymous", "6e0deaf2-a92b-421b-9ece-86783265596f", "a7701d22-e716-4584-a18c-055c8c4f2bd6", "Editor", None),
+    ("anonymous", "6e0deaf2-a92b-421b-9ece-86783265596f", "2f05f775-5d8a-4778-9942-3d13a64ec7a3", "Editor", None),
     ("owner", "00000000-0000-0000-0000-000000000000", "6e0deaf2-a92b-421b-9ece-86783265596f", "Workspace does not exist", 404),
     ("owner", "b27c51a0-7374-462d-8a53-d97d47176c10", "00000000-0000-0000-0000-000000000000", "Role does not exist", 404),
     ("anonymous", "b27c51a0-7374-462d-8a53-d97d47176c10", "60b9d8b1-28d1-4d0d-9bee-4e47219d0118", "Workspace does not exist", 404),