test_delete_not_owned_post

atrox3d · atrox3d · commit 9a7c3c2e10ba · 2024-08-30T09:12:07.000+02:00
diff --git a/pytest.ini b/pytest.ini
@@ -15,7 +15,7 @@ addopts = -v --disable-warnings
 ; python_functions = test* *test
 
 log_cli = 1
-log_cli_level = INFO
+log_cli_level = WARN
 # log_cli_format = [%(levelname)8s] %(message)s (%(filename)s:%(lineno)s)
 log_cli_format = [%(levelname)8s] %(funcName)25s | %(message)s
 # log_level = DEBUG
diff --git a/tests/fixtures/fakedata/posts.py b/tests/fixtures/fakedata/posts.py
@@ -35,7 +35,7 @@ def add_fake_posts_db_userid1(session, fake_post_models_db_userid1) -> list[mode
 def fake_post_models_db_multiple_users(fake_posts, add_users_db) -> list[models.Post]:
     logger.debug('returning fake Post model list')
     userids = [user.id for user in add_users_db]
-    logger.warning(f'----- {userids = } -------')
+    logger.info(f'----- {userids = } -------')
     return [models.Post(**_post.model_dump(), 
             owner_id=id) 
             for _post, id in zip(fake_posts, userids)]
diff --git a/tests/test_posts.py b/tests/test_posts.py
@@ -149,3 +149,18 @@ def test_delete_owned_post(authorized_client, token, session, add_fake_posts_db_
     # assert len(posts) == 2
     check = session.query(models.Post).filter(models.Post.id==post.id).first()
     assert check is None
+
+def test_delete_not_owned_post(authorized_client, token, session, add_fake_posts_db_multiple_users):
+    tokendata = app.oauth2.verify_access_token(token, app.oauth2.unhautorized_exception)
+    post: models.Post = (
+        session.query(models.Post)
+        .filter(models.Post.owner_id!=tokendata.id)
+        .first()
+    )
+    logger.info(post.content)
+    response = authorized_client.delete(f'posts/{post.id}')
+    assert response.status_code == 403
+    # posts = session.query(models.Post).all()
+    # assert len(posts) == 2
+    check = session.query(models.Post).filter(models.Post.id==post.id).first()
+    assert check is not None
