soc/iris-web/tests/tests_rest_c...

#  IRIS Source Code
#  Copyright (C) 2023 - DFIR-IRIS
#  contact@dfir-iris.org
#
#  This program is free software; you can redistribute it and/or
#  modify it under the terms of the GNU Lesser General Public
#  License as published by the Free Software Foundation; either
#  version 3 of the License, or (at your option) any later version.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
#  Lesser General Public License for more details.
#
#  You should have received a copy of the GNU Lesser General Public License
#  along with this program; if not, write to the Free Software Foundation,
#  Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

from unittest import TestCase
from iris import Iris

_PERMISSION_CUSTOMERS_WRITE = 0x80
_IRIS_INITIAL_CLIENT_IDENTIFIER = 1


class TestsRestCustomers(TestCase):

    def setUp(self) -> None:
        self._subject = Iris()

    def tearDown(self):
        self._subject.clear_database()
        users = self._subject.get('/manage/users/list').json()
        for user in users['data']:
            identifier = user['user_id']
            body = {'customers_membership': [_IRIS_INITIAL_CLIENT_IDENTIFIER]}
            self._subject.create(f'/manage/users/{identifier}/customers/update', body)
        customers = self._subject.get('/manage/customers/list').json()
        for customer in customers['data']:
            identifier = customer['customer_id']
            self._subject.create(f'/manage/customers/delete/{identifier}', {})

    def test_create_customer_should_return_200_when_user_has_customer_write_right(self):
        body = {
            'group_name': 'Customer create',
            'group_description': 'Group with customers_write right',
            'group_permissions': [_PERMISSION_CUSTOMERS_WRITE]
        }
        response = self._subject.create('/manage/groups/add', body).json()
        group_identifier = response['data']['group_id']
        user = self._subject.create_dummy_user()
        body = {'groups_membership': [group_identifier]}
        self._subject.create(f'/manage/users/{user.get_identifier()}/groups/update', body)

        body = {'custom_attributes': {}, 'customer_description': '', 'customer_name': 'Customer', 'customer_sla': ''}
        response = user.create('/manage/customers/add', body)

        self.assertEqual(200, response.status_code)