change test_permissions.py (questions are readonly now, new resources questionnaires and datafields added)

This commit is contained in:
Mira Weller committed 2026-11-10 14:53:41 +01:00
1 parent 125a4f33d0
commit 17b38f3f75
2 files changed
+37 -5

No files matched your search

+1 -1
View File
@@ -662,7 +662,7 @@ class CompatQuestionViewSet(ConditionalListView, CompatListMixin, BaseDatafieldV
def _check_defer(self, mode, request, *args, **kwargs):
sales_channel_ident = request.query_params.get('sales_channel', None)
if sales_channel_ident is None and isinstance(request.auth, Device):
sales_channel_ident = 'pretixpos' if request.auth.software_brand.startswith("pretixPOS") else 'web'
sales_channel_ident = 'pretixpos' if (request.auth.software_brand or '').startswith('pretixPOS') else 'web'
if sales_channel_ident:
logger.info('Returning app compatible question %s for %s (device: %r %s %s) on %s/%s', mode, sales_channel_ident, request.auth, getattr(request.auth, 'software_brand', ''), getattr(request.auth, 'software_version', ''), request.organizer.slug, request.event.slug)
return POSCompatQuestionViewSet.as_view(
+36 -4
View File
@@ -48,6 +48,9 @@ event_urls = [
('event.orders:read', 'orders/'),
('event.orders:read', 'orderpositions/'),
(None, 'questions/'),
(None, 'questionnaires/'),
(None, 'datafields/order/'),
(None, 'datafields/position/'),
(None, 'quotas/'),
('event.vouchers:read', 'vouchers/'),
(None, 'subevents/'),
@@ -145,17 +148,46 @@ event_permission_sub_urls = [
('put', 'event.items:write', 'quotas/1/', 404),
('patch', 'event.items:write', 'quotas/1/', 404),
('delete', 'event.items:write', 'quotas/1/', 404),
('get', None, 'questions/', 200),
('get', None, 'questions/1/', 404),
('post', 'event.items:write', 'questions/', 400),
('put', 'event.items:write', 'questions/1/', 404),
('patch', 'event.items:write', 'questions/1/', 404),
('delete', 'event.items:write', 'questions/1/', 404),
('get', None, 'questions/1/options/', 404),
('get', None, 'questions/1/options/1/', 404),
('put', 'event.items:write', 'questions/1/options/1/', 404),
('patch', 'event.items:write', 'questions/1/options/1/', 404),
('delete', 'event.items:write', 'questions/1/options/1/', 404),
('get', None, 'datafields/position/', 200),
('get', None, 'datafields/position/1/', 404),
('post', 'event.items:write', 'datafields/position/', 400),
('put', 'event.items:write', 'datafields/position/1/', 404),
('patch', 'event.items:write', 'datafields/position/1/', 404),
('delete', 'event.items:write', 'datafields/position/1/', 404),
('get', None, 'datafields/position/1/options/', 404),
('get', None, 'datafields/position/1/options/1/', 404),
('put', 'event.items:write', 'datafields/position/1/options/1/', 404),
('patch', 'event.items:write', 'datafields/position/1/options/1/', 404),
('delete', 'event.items:write', 'datafields/position/1/options/1/', 404),
('get', None, 'datafields/order/', 200),
('get', None, 'datafields/order/1/', 404),
('post', 'event.items:write', 'datafields/order/', 400),
('put', 'event.items:write', 'datafields/order/1/', 404),
('patch', 'event.items:write', 'datafields/order/1/', 404),
('delete', 'event.items:write', 'datafields/order/1/', 404),
('get', None, 'datafields/order/1/options/', 404),
('get', None, 'datafields/order/1/options/1/', 404),
('put', 'event.items:write', 'datafields/order/1/options/1/', 404),
('patch', 'event.items:write', 'datafields/order/1/options/1/', 404),
('delete', 'event.items:write', 'datafields/order/1/options/1/', 404),
('get', None, 'questionnaires/', 200),
('get', None, 'questionnaires/1/', 404),
('post', 'event.items:write', 'questionnaires/', 400),
('put', 'event.items:write', 'questionnaires/1/', 404),
('patch', 'event.items:write', 'questionnaires/1/', 404),
('delete', 'event.items:write', 'questionnaires/1/', 404),
('post', 'event.orders:write', 'orders/', 400),
('patch', 'event.orders:write', 'orders/ABC12/', 404),
('post', 'event.orders:write', 'orders/ABC12/mark_paid/', 404),