Files
govoplan-idm/tests/test_interface_documentation_contract.py
T
zemion 21e8f0bc39
Module Package Release / publish-packages (push) Successful in 11s
feat(idm): govern delegation chains and timed escalation
2026-08-22 03:12:30 +02:00

67 lines
2.9 KiB
Python

from __future__ import annotations
import unittest
from govoplan_idm.backend.manifest import manifest
from govoplan_idm.backend.api.v1.routes import ORGANIZATION_IDENTITY_READ_SCOPES
class IdmInterfaceDocumentationContractTests(unittest.TestCase):
def test_route_and_contributed_action_remain_declared(self) -> None:
frontend = manifest.frontend
self.assertIsNotNone(frontend)
self.assertEqual(
{"/idm"},
{route.path for route in frontend.routes}, # type: ignore[union-attr]
)
self.assertEqual(
{"idm.action.view-function-assignments"},
{surface.id for surface in frontend.view_surfaces}, # type: ignore[union-attr]
)
self.assertTrue(all(item.icon == "users" for item in manifest.nav_items))
def test_topics_publish_workflow_blocker_and_consequence_metadata(self) -> None:
topics = {topic.id: topic for topic in manifest.documentation}
self.assertIn("idm.workflow.assign-function-to-identity", topics)
self.assertIn("idm.reference.assignment-governance", topics)
self.assertIn("idm.reference.fields-and-consequences", topics)
self.assertIn("idm.reference.typed-relationships", topics)
workflow = topics["idm.workflow.assign-function-to-identity"]
self.assertIn("idm.blocker.permission", workflow.metadata["help_contexts"])
governance = topics["idm.reference.assignment-governance"]
self.assertIn("function_decision", governance.metadata["consequence_classes"])
reference = topics["idm.reference.fields-and-consequences"]
self.assertIn("idm.field.acting-for", reference.metadata["help_contexts"])
self.assertIn("idm.field.escalation", reference.metadata["help_contexts"])
self.assertIn("deactivate_or_expire", reference.metadata["consequence_classes"])
self.assertIn("escalation", reference.metadata["consequence_classes"])
relationships = topics["idm.reference.typed-relationships"]
self.assertEqual(
{
"title",
"summary",
"body",
},
set(relationships.translations["de"]),
)
self.assertIn(
"idm.relationships.field.revocation-reason",
relationships.metadata["help_contexts"],
)
self.assertIn(
"idm.typed-groups.action.resolve-memberships",
relationships.metadata["help_contexts"],
)
self.assertIn("Revocation immediately", relationships.metadata["consequences"][2])
self.assertIn("Access permissions remain unchanged", relationships.metadata["verification"])
def test_relationship_writers_may_use_identity_search_selectors(self) -> None:
self.assertIn("idm:relationship:write", ORGANIZATION_IDENTITY_READ_SCOPES)
self.assertNotIn("idm:relationship:read", ORGANIZATION_IDENTITY_READ_SCOPES)
if __name__ == "__main__":
unittest.main()