Quiiz system

tests/unit/services/devii/tasks/guards.py

@@ -0,0 +1,95 @@
+# retoor <retoor@molodetz.nl>
+
+from datetime import timedelta
+
+from devplacepy.database import invalidate_admins_cache
+from devplacepy.services.devii.tasks.guards import (
+    REASON_BUDGET,
+    REASON_EXPIRED,
+    REASON_FAILURES,
+    REASON_MAX_RUNS,
+    REASON_NOT_ADMIN,
+    automation_allowed,
+    refusal,
+)
+from devplacepy.services.devii.tasks.schedule import now_utc, to_iso
+from devplacepy.utils import generate_uid
+
+
+def _account(local_db, role):
+    uid = generate_uid()
+    local_db["users"].insert(
+        {
+            "uid": uid,
+            "username": f"guard-{uid[-10:]}",
+            "role": role,
+            "deleted_at": None,
+        }
+    )
+    invalidate_admins_cache()
+    return uid
+
+
+def _row(owner_uid, **overrides):
+    row = {
+        "uid": generate_uid(),
+        "owner_kind": "user",
+        "owner_id": owner_uid,
+        "run_count": 0,
+        "created_at": to_iso(now_utc()),
+    }
+    row.update(overrides)
+    return row
+
+
+def test_only_administrators_may_automate(local_db):
+    admin = _account(local_db, "Admin")
+    member = _account(local_db, "Member")
+    assert automation_allowed("user", admin) is True
+    assert automation_allowed("user", member) is False
+    assert automation_allowed("guest", "guest-cookie") is False
+    assert automation_allowed("user", "") is False
+
+
+def test_member_owned_task_is_refused(local_db):
+    member = _account(local_db, "Member")
+    assert refusal(_row(member), now_utc()) == REASON_NOT_ADMIN
+
+
+def test_clean_admin_task_is_allowed(local_db):
+    admin = _account(local_db, "Admin")
+    assert refusal(_row(admin), now_utc()) is None
+
+
+def test_exhausted_task_is_refused(local_db):
+    admin = _account(local_db, "Admin")
+    row = _row(admin, max_runs=5, run_count=5)
+    assert refusal(row, now_utc()) == REASON_MAX_RUNS
+
+
+def test_expired_task_is_refused(local_db):
+    admin = _account(local_db, "Admin")
+    now = now_utc()
+    row = _row(admin, expires_at=to_iso(now - timedelta(minutes=1)))
+    assert refusal(row, now) == REASON_EXPIRED
+
+
+def test_task_without_an_expiry_stops_at_the_fallback_ceiling(local_db):
+    admin = _account(local_db, "Admin")
+    now = now_utc()
+    row = _row(admin, created_at=to_iso(now - timedelta(days=40)))
+    assert refusal(row, now) == REASON_EXPIRED
+
+
+def test_repeated_failures_refuse_the_task(local_db):
+    admin = _account(local_db, "Admin")
+    row = _row(admin, failure_count=3)
+    assert refusal(row, now_utc(), max_failures=3) == REASON_FAILURES
+    assert refusal(row, now_utc(), max_failures=0) is None
+
+
+def test_budget_probe_refuses_the_task(local_db):
+    admin = _account(local_db, "Admin")
+    row = _row(admin)
+    assert refusal(row, now_utc(), budget_exceeded=lambda k, i: True) == REASON_BUDGET
+    assert refusal(row, now_utc(), budget_exceeded=lambda k, i: False) is None