Enforce tenant module entitlements beyond requests

tests/test_dataflow_run_worker.py

@@ -8,6 +8,7 @@ from govoplan_core.celery_app import (
     dispatch_dataflow_runs,
     purge_dataflow_runs,
 )
+from tests.worker_test_support import allowed_worker_admissions
 
 
 class DataflowRunWorkerTests(unittest.TestCase):
@@ -30,11 +31,16 @@ class DataflowRunWorkerTests(unittest.TestCase):
                 "govoplan_core.db.session.get_database",
                 return_value=database,
             ),
+            patch(
+                "govoplan_core.celery_app._worker_admissions",
+                side_effect=allowed_worker_admissions,
+            ),
         ):
             result = dispatch_dataflow_runs.run(7)
 
         provider.dispatch_pending.assert_called_once_with(
             session,
+            tenant_id="tenant-1",
             limit=7,
             worker_id=ANY,
         )
@@ -57,10 +63,18 @@ class DataflowRunWorkerTests(unittest.TestCase):
                 "govoplan_core.db.session.get_database",
                 return_value=database,
             ),
+            patch(
+                "govoplan_core.celery_app._worker_admissions",
+                side_effect=allowed_worker_admissions,
+            ),
         ):
             result = purge_dataflow_runs.run(25)
 
-        provider.purge_expired.assert_called_once_with(session, limit=25)
+        provider.purge_expired.assert_called_once_with(
+            session,
+            tenant_id="tenant-1",
+            limit=25,
+        )
         session.commit.assert_called_once_with()
         self.assertEqual(2, result["purged"])