feat: enforce api permissions

This commit is contained in:
hailin
2026-07-01 14:09:26 +08:00
parent 83e9960d18
commit 953f126277
9 changed files with 115 additions and 20 deletions

View File

@@ -1,8 +1,8 @@
from apps.tickets.models import Ticket, TicketEvent
def test_create_ticket_returns_ticket_detail(client, db):
response = client.post(
def test_create_ticket_returns_ticket_detail(admin_client, db):
response = admin_client.post(
"/api/tickets",
data={
"title": "Payment callback fails",
@@ -23,11 +23,11 @@ def test_create_ticket_returns_ticket_detail(client, db):
assert TicketEvent.objects.filter(ticket_id=payload["id"], event_type="created").exists()
def test_list_tickets_filters_by_status(client, db):
def test_list_tickets_filters_by_status(admin_client, db):
Ticket.objects.create(ticket_no="TK202606300001", title="A", description="A", status="pending")
Ticket.objects.create(ticket_no="TK202606300002", title="B", description="B", status="resolved")
response = client.get("/api/tickets?status=pending")
response = admin_client.get("/api/tickets?status=pending")
assert response.status_code == 200
payload = response.json()
@@ -35,7 +35,7 @@ def test_list_tickets_filters_by_status(client, db):
assert payload[0]["ticket_no"] == "TK202606300001"
def test_transition_ticket_status_creates_event(client, db):
def test_transition_ticket_status_creates_event(admin_client, db):
ticket = Ticket.objects.create(
ticket_no="TK202606300003",
title="A",
@@ -43,7 +43,7 @@ def test_transition_ticket_status_creates_event(client, db):
status="pending",
)
response = client.post(
response = admin_client.post(
f"/api/tickets/{ticket.id}/status",
data={"status": "in_progress", "remark": "Start handling"},
content_type="application/json",