diff options
Diffstat (limited to 'muck/authz_tests.py')
| -rw-r--r-- | muck/authz_tests.py | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/muck/authz_tests.py b/muck/authz_tests.py index 0128c6b..fffb96b 100644 --- a/muck/authz_tests.py +++ b/muck/authz_tests.py @@ -39,12 +39,16 @@ class AuthorizationCheckerTests(unittest.TestCase): def test_denies_if_token_parsing_fails(self): r = muck.Request(method='GET') - self.assertFalse(self.ac.request_is_allowed(r, [])) + self.assertFalse(self.ac.request_is_allowed(r, 'GET', [])) def test_denies_if_token_lacks_required_scope(self): r = self.create_request([]) - self.assertFalse(self.ac.request_is_allowed(r, ['foo'])) + self.assertFalse(self.ac.request_is_allowed(r, 'GET', ['foo'])) + + def test_denies_if_method_is_wrong(self): + r = self.create_request(['foo']) + self.assertFalse(self.ac.request_is_allowed(r, 'DELETE', ['foo'])) def test_allows_for_acceptable_request(self): r = self.create_request(['foo']) - self.assertTrue(self.ac.request_is_allowed(r, ['foo'])) + self.assertTrue(self.ac.request_is_allowed(r, 'GET', ['foo'])) |