mirror of
https://github.com/TencentCloud/Octop.git
synced 2026-10-21 06:29:24 +08:00
jubaoliangandCursor
e62073a602
Add is_shared so owners can expose a runtime agent for others to chat with while keeping config writes owner-only. Co-authored-by: Cursor <cursoragent@cursor.com>
85 lines
2.6 KiB
Python
85 lines
2.6 KiB
Python
"""tests/unit/api/test_agent_access.py"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from types import SimpleNamespace
|
|
|
|
import pytest
|
|
|
|
from octop.api.common.agent import (
|
|
agent_is_shared,
|
|
assert_agent_access_row,
|
|
assert_agent_owner,
|
|
user_owns_agent,
|
|
)
|
|
from octop.infra.errors import ErrorCode, OctopError
|
|
|
|
|
|
def test_owner_may_access() -> None:
|
|
row = SimpleNamespace(user_id=1)
|
|
user = SimpleNamespace(id=1, is_admin=False)
|
|
assert_agent_owner(row, user)
|
|
|
|
|
|
def test_non_owner_forbidden() -> None:
|
|
row = SimpleNamespace(user_id=1)
|
|
user = SimpleNamespace(id=2, is_admin=False)
|
|
with pytest.raises(OctopError) as ei:
|
|
assert_agent_owner(row, user)
|
|
assert ei.value.code is ErrorCode.FORBIDDEN
|
|
|
|
|
|
def test_shared_agent_non_admin_forbidden() -> None:
|
|
row = SimpleNamespace(user_id=None)
|
|
user = SimpleNamespace(id=1, is_admin=False)
|
|
with pytest.raises(OctopError) as ei:
|
|
assert_agent_owner(row, user)
|
|
assert ei.value.code is ErrorCode.FORBIDDEN
|
|
|
|
|
|
def test_shared_agent_admin_allowed() -> None:
|
|
row = SimpleNamespace(user_id=None)
|
|
user = SimpleNamespace(id=1, is_admin=True)
|
|
assert_agent_owner(row, user)
|
|
|
|
|
|
def test_shared_agent_accessible_to_non_owner() -> None:
|
|
row = SimpleNamespace(user_id=1, is_shared=1)
|
|
user = SimpleNamespace(id=2, is_admin=False)
|
|
assert_agent_access_row(row, user)
|
|
|
|
|
|
def test_private_agent_forbidden_to_non_owner() -> None:
|
|
row = SimpleNamespace(user_id=1, is_shared=0)
|
|
user = SimpleNamespace(id=2, is_admin=False)
|
|
with pytest.raises(OctopError) as ei:
|
|
assert_agent_access_row(row, user)
|
|
assert ei.value.code == ErrorCode.FORBIDDEN
|
|
|
|
|
|
def test_shared_non_owner_still_fails_owner_assert() -> None:
|
|
row = SimpleNamespace(user_id=1, is_shared=1)
|
|
user = SimpleNamespace(id=2, is_admin=False)
|
|
with pytest.raises(OctopError):
|
|
assert_agent_owner(row, user)
|
|
|
|
|
|
def test_agent_is_shared_true_when_flag_set() -> None:
|
|
row = SimpleNamespace(is_shared=1)
|
|
assert agent_is_shared(row) is True
|
|
|
|
|
|
def test_agent_is_shared_false_when_missing_or_zero() -> None:
|
|
assert agent_is_shared(SimpleNamespace(is_shared=0)) is False
|
|
assert agent_is_shared(SimpleNamespace()) is False
|
|
|
|
|
|
def test_user_owns_agent_only_for_matching_owner() -> None:
|
|
row = SimpleNamespace(user_id=1)
|
|
owner = SimpleNamespace(id=1, is_admin=False)
|
|
other = SimpleNamespace(id=2, is_admin=False)
|
|
admin = SimpleNamespace(id=99, is_admin=True)
|
|
assert user_owns_agent(row, owner) is True
|
|
assert user_owns_agent(row, other) is False
|
|
assert user_owns_agent(row, admin) is False
|