Merge pull request #58 from ropable/master

Remove DjangoAuthorization from all API Resource classes, add tests.

prs2/api.py

@@ -3,7 +3,6 @@
 from tastypie import fields
 from tastypie.api import Api
 from tastypie.authentication import SessionAuthentication
-from tastypie.authorization import DjangoAuthorization
 from tastypie.cache import SimpleCache
 from tastypie.resources import ModelResource, ALL, ALL_WITH_RELATIONS
 from django.contrib.auth.models import User, Group
@@ -39,7 +38,6 @@ class Meta:
         cache = SimpleCache()
         filtering = {'id': ALL, 'name': ALL}
         authentication = SessionAuthentication()
-        authorization = DjangoAuthorization()
 
 v1_api.register(GroupResource())
 
@@ -69,7 +67,6 @@ class Meta:
         }
         cache = SimpleCache()
         authentication = SessionAuthentication()
-        authorization = DjangoAuthorization()
 
 v1_api.register(UserResource())
 
@@ -81,6 +78,5 @@ class Meta:
         filtering = {'id': ALL, 'name': ALL, 'slug': ALL}
         cache = SimpleCache()
         authentication = SessionAuthentication()
-        authorization = DjangoAuthorization()
 
 v1_api.register(TagResource())

prs2/referral/api.py

@@ -1,6 +1,5 @@
 from tastypie import fields
 from tastypie.authentication import SessionAuthentication
-from tastypie.authorization import DjangoAuthorization
 from tastypie.cache import SimpleCache
 from tastypie.resources import ModelResource, ALL_WITH_RELATIONS
 
@@ -24,7 +23,6 @@ def generate_meta(klass, overrides={}):
     """
     metaitems = {
         'authentication': SessionAuthentication(),
-        'authorization': DjangoAuthorization(),
         'queryset': klass.objects.all(),
         'resource_name': klass._meta.model_name,
         'filtering': generate_filtering(klass),

prs2/referral/test_api.py

@@ -24,8 +24,10 @@ def test_permission_resource_list(self):
             self.client.login(username='normaluser', password='pass')
             response = self.client.get(url)
             self.assertEqual(response.status_code, 200)
+            self.client.login(username='readonlyuser', password='pass')
+            response = self.client.get(url)
+            self.assertEqual(response.status_code, 200)
 
-    '''
     def test_permission_resource_detail(self):
         """Test auth and anon access permission to resource details
         """
@@ -43,6 +45,9 @@ def test_permission_resource_detail(self):
             response = self.client.get(url)
             self.assertEqual(response.status_code, 200)
             self.client.logout()
+            self.client.login(username='readonlyuser', password='pass')
+            response = self.client.get(url)
+            self.assertEqual(response.status_code, 200)
+            self.client.logout()
             response = self.client.get(url)
             self.assertEqual(response.status_code, 401)
-    '''