test(privacy): cover everyone group-invite policy
Some checks are pending
CI / test (push) Has started running
Some checks are pending
CI / test (push) Has started running
This commit is contained in:
@@ -611,6 +611,28 @@ async def test_group_invite_privacy_nobody_blocks_invites_even_from_contacts(cli
|
||||
assert create_group_blocked.status_code == 403
|
||||
|
||||
|
||||
async def test_group_invite_privacy_everyone_allows_invites_without_contacts(client, db_session):
|
||||
inviter = await _create_verified_user(client, db_session, "invite_everyone_u1@example.com", "invite_everyone_u1", "strongpass123")
|
||||
target = await _create_verified_user(client, db_session, "invite_everyone_u2@example.com", "invite_everyone_u2", "strongpass123")
|
||||
|
||||
me_target = await client.get("/api/v1/auth/me", headers={"Authorization": f"Bearer {target['access_token']}"})
|
||||
target_id = me_target.json()["id"]
|
||||
|
||||
set_everyone = await client.put(
|
||||
"/api/v1/users/profile",
|
||||
headers={"Authorization": f"Bearer {target['access_token']}"},
|
||||
json={"privacy_group_invites": "everyone"},
|
||||
)
|
||||
assert set_everyone.status_code == 200
|
||||
|
||||
create_group_allowed = await client.post(
|
||||
"/api/v1/chats",
|
||||
headers={"Authorization": f"Bearer {inviter['access_token']}"},
|
||||
json={"type": ChatType.GROUP.value, "title": "Everyone allowed group", "member_ids": [target_id]},
|
||||
)
|
||||
assert create_group_allowed.status_code == 200
|
||||
|
||||
|
||||
async def test_avatar_privacy_hidden_from_other_users_search(client, db_session):
|
||||
owner = await _create_verified_user(client, db_session, "avatar_owner@example.com", "avatar_owner", "strongpass123")
|
||||
viewer = await _create_verified_user(client, db_session, "avatar_viewer@example.com", "avatar_viewer", "strongpass123")
|
||||
|
||||
Reference in New Issue
Block a user