HaiLin/ai-ticket-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: enforce api permissions

Browse Source
This commit is contained in:
hailin
2026-07-01 14:09:26 +08:00
parent 83e9960d18
commit 953f126277
9 changed files with 115 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
backend/apps/tickets/tests/test_ticket_api.py
View File

@@ -1,8 +1,8 @@
from apps.tickets.models import Ticket, TicketEvent
def test_create_ticket_returns_ticket_detail(client, db):
response = client.post(
def test_create_ticket_returns_ticket_detail(admin_client, db):
response = admin_client.post(
"/api/tickets",
data={
"title": "Payment callback fails",
@@ -23,11 +23,11 @@ def test_create_ticket_returns_ticket_detail(client, db):
assert TicketEvent.objects.filter(ticket_id=payload["id"], event_type="created").exists()
def test_list_tickets_filters_by_status(client, db):
def test_list_tickets_filters_by_status(admin_client, db):
Ticket.objects.create(ticket_no="TK202606300001", title="A", description="A", status="pending")
Ticket.objects.create(ticket_no="TK202606300002", title="B", description="B", status="resolved")
response = client.get("/api/tickets?status=pending")
response = admin_client.get("/api/tickets?status=pending")
assert response.status_code == 200
payload = response.json()
@@ -35,7 +35,7 @@ def test_list_tickets_filters_by_status(client, db):
assert payload[0]["ticket_no"] == "TK202606300001"
def test_transition_ticket_status_creates_event(client, db):
def test_transition_ticket_status_creates_event(admin_client, db):
ticket = Ticket.objects.create(
ticket_no="TK202606300003",
title="A",
@@ -43,7 +43,7 @@ def test_transition_ticket_status_creates_event(client, db):
status="pending",
)
response = client.post(
response = admin_client.post(
f"/api/tickets/{ticket.id}/status",
data={"status": "in_progress", "remark": "Start handling"},
content_type="application/json",

12
backend/apps/tickets/tests/test_ticket_export.py
View File

@@ -2,10 +2,10 @@ from apps.audit.models import OperationAuditLog
from apps.tickets.models import Ticket
def test_add_comment_to_ticket(client, db):
def test_add_comment_to_ticket(admin_client, db):
ticket = Ticket.objects.create(ticket_no="TK202606300010", title="A", description="A")
response = client.post(
response = admin_client.post(
f"/api/tickets/{ticket.id}/comments",
data={
"content": "Checked logs",
@@ -20,10 +20,10 @@ def test_add_comment_to_ticket(client, db):
assert ticket.comments.count() == 1
def test_add_attachment_to_ticket(client, db):
def test_add_attachment_to_ticket(admin_client, db):
ticket = Ticket.objects.create(ticket_no="TK202606300011", title="A", description="A")
response = client.post(
response = admin_client.post(
f"/api/tickets/{ticket.id}/attachments",
data={
"file_name": "error.log",
@@ -38,10 +38,10 @@ def test_add_attachment_to_ticket(client, db):
assert response.json()["file_name"] == "error.log"
def test_export_tickets_returns_csv_and_audit_log(client, db):
def test_export_tickets_returns_csv_and_audit_log(admin_client, db):
Ticket.objects.create(ticket_no="TK202606300012", title="Export me", description="A")
response = client.get("/api/tickets/export")
response = admin_client.get("/api/tickets/export")
assert response.status_code == 200
assert response["content-type"].startswith("text/csv")