1 files changed, 125 insertions, 0 deletions
diff --git a/tests/test_config/test_security.py b/tests/test_config/test_security.py
new file mode 100644
index 000000000..5db8e21fc
--- /dev/null
+++ b/tests/test_config/test_security.py
@@ -0,0 +1,125 @@
+import unittest
+
+from pyramid.exceptions import ConfigurationExecutionError
+from pyramid.exceptions import ConfigurationError
+
+class ConfiguratorSecurityMethodsTests(unittest.TestCase):
+    def _makeOne(self, *arg, **kw):
+        from pyramid.config import Configurator
+        config = Configurator(*arg, **kw)
+        return config
+
+    def test_set_authentication_policy_no_authz_policy(self):
+        config = self._makeOne()
+        policy = object()
+        config.set_authentication_policy(policy)
+        self.assertRaises(ConfigurationExecutionError, config.commit)
+
+    def test_set_authentication_policy_no_authz_policy_autocommit(self):
+        config = self._makeOne(autocommit=True)
+        policy = object()
+        self.assertRaises(ConfigurationError,
+                          config.set_authentication_policy, policy)
+
+    def test_set_authentication_policy_with_authz_policy(self):
+        from pyramid.interfaces import IAuthenticationPolicy
+        from pyramid.interfaces import IAuthorizationPolicy
+        config = self._makeOne()
+        authn_policy = object()
+        authz_policy = object()
+        config.registry.registerUtility(authz_policy, IAuthorizationPolicy)
+        config.set_authentication_policy(authn_policy)
+        config.commit()
+        self.assertEqual(
+            config.registry.getUtility(IAuthenticationPolicy), authn_policy)
+
+    def test_set_authentication_policy_with_authz_policy_autocommit(self):
+        from pyramid.interfaces import IAuthenticationPolicy
+        from pyramid.interfaces import IAuthorizationPolicy
+        config = self._makeOne(autocommit=True)
+        authn_policy = object()
+        authz_policy = object()
+        config.registry.registerUtility(authz_policy, IAuthorizationPolicy)
+        config.set_authentication_policy(authn_policy)
+        config.commit()
+        self.assertEqual(
+            config.registry.getUtility(IAuthenticationPolicy), authn_policy)
+
+    def test_set_authorization_policy_no_authn_policy(self):
+        config = self._makeOne()
+        policy = object()
+        config.set_authorization_policy(policy)
+        self.assertRaises(ConfigurationExecutionError, config.commit)
+
+    def test_set_authorization_policy_no_authn_policy_autocommit(self):
+        from pyramid.interfaces import IAuthorizationPolicy
+        config = self._makeOne(autocommit=True)
+        policy = object()
+        config.set_authorization_policy(policy)
+        self.assertEqual(
+            config.registry.getUtility(IAuthorizationPolicy), policy)
+
+    def test_set_authorization_policy_with_authn_policy(self):
+        from pyramid.interfaces import IAuthorizationPolicy
+        from pyramid.interfaces import IAuthenticationPolicy
+        config = self._makeOne()
+        authn_policy = object()
+        authz_policy = object()
+        config.registry.registerUtility(authn_policy, IAuthenticationPolicy)
+        config.set_authorization_policy(authz_policy)
+        config.commit()
+        self.assertEqual(
+            config.registry.getUtility(IAuthorizationPolicy), authz_policy)
+
+    def test_set_authorization_policy_with_authn_policy_autocommit(self):
+        from pyramid.interfaces import IAuthorizationPolicy
+        from pyramid.interfaces import IAuthenticationPolicy
+        config = self._makeOne(autocommit=True)
+        authn_policy = object()
+        authz_policy = object()
+        config.registry.registerUtility(authn_policy, IAuthenticationPolicy)
+        config.set_authorization_policy(authz_policy)
+        self.assertEqual(
+            config.registry.getUtility(IAuthorizationPolicy), authz_policy)
+
+    def test_set_default_permission(self):
+        from pyramid.interfaces import IDefaultPermission
+        config = self._makeOne(autocommit=True)
+        config.set_default_permission('view')
+        self.assertEqual(config.registry.getUtility(IDefaultPermission),
+                         'view')
+
+    def test_add_permission(self):
+        config = self._makeOne(autocommit=True)
+        config.add_permission('perm')
+        cat = config.registry.introspector.get_category('permissions')
+        self.assertEqual(len(cat), 1)
+        D = cat[0]
+        intr = D['introspectable']
+        self.assertEqual(intr['value'], 'perm')
+
+    def test_set_default_csrf_options(self):
+        from pyramid.interfaces import IDefaultCSRFOptions
+        config = self._makeOne(autocommit=True)
+        config.set_default_csrf_options()
+        result = config.registry.getUtility(IDefaultCSRFOptions)
+        self.assertEqual(result.require_csrf, True)
+        self.assertEqual(result.token, 'csrf_token')
+        self.assertEqual(result.header, 'X-CSRF-Token')
+        self.assertEqual(list(sorted(result.safe_methods)),
+                         ['GET', 'HEAD', 'OPTIONS', 'TRACE'])
+        self.assertTrue(result.callback is None)
+
+    def test_changing_set_default_csrf_options(self):
+        from pyramid.interfaces import IDefaultCSRFOptions
+        config = self._makeOne(autocommit=True)
+        def callback(request): return True
+        config.set_default_csrf_options(
+            require_csrf=False, token='DUMMY', header=None,
+            safe_methods=('PUT',), callback=callback)
+        result = config.registry.getUtility(IDefaultCSRFOptions)
+        self.assertEqual(result.require_csrf, False)
+        self.assertEqual(result.token, 'DUMMY')
+        self.assertEqual(result.header, None)
+        self.assertEqual(list(sorted(result.safe_methods)), ['PUT'])
+        self.assertTrue(result.callback is callback)