Calendar tests: rights access on workspace clendars

tracim/tracim/fixtures/users_and_groups.py

         lawrence.password = 'foobarbaz'
         self._session.add(lawrence)
         g2.users.append(lawrence)
+
+        bob = model.User()
+        bob.display_name = 'Bob i.'
+        bob.email = 'bob@fsf.local'
+        bob.password = 'foobarbaz'
+        self._session.add(bob)
+        g2.users.append(bob)

tracim/tracim/tests/__init__.py

 from tracim.model import DBSession, Content
 from tracim.model.data import Workspace, ContentType, ContentRevisionRO
 from tracim.lib.calendar import CALENDAR_BASE_URL_TEMPLATE
+from tracim.lib.calendar import CALENDAR_WORKSPACE_URL_TEMPLATE
 from tracim.lib.calendar import CALENDAR_USER_URL_TEMPLATE
 
 __all__ = ['setup_app', 'setup_db', 'teardown_db', 'TestController']
             id=user_id,
             extra='',
         )
+
+    def _get_workspace_calendar_url(self, workspace_id):
+        from tracim.config.app_cfg import CFG
+        cfg = CFG.get_instance()
+
+        return CALENDAR_WORKSPACE_URL_TEMPLATE.format(
+            proto='https' if cfg.RADICALE_CLIENT_SSL else 'http',
+            domain=cfg.RADICALE_CLIENT_HOST or '127.0.0.1',
+            port=str(cfg.RADICALE_CLIENT_PORT),
+            id=workspace_id,
+            extra='',
+        )

tracim/tracim/tests/functional/test_calendar.py

 import time
 
 import caldav
+import transaction
 from caldav.lib.error import AuthorizationError
 from nose.tools import eq_, ok_
 import requests
 from requests.exceptions import ConnectionError
 
+from tracim.lib.workspace import WorkspaceApi
 from tracim.model import DBSession
 from tracim.tests import TestCalendar as BaseTestCalendar
 from tracim.model.auth import User
         except AuthorizationError:
             ok_(True, 'AuthorizationError thrown correctly')
 
-    def test_func__radicale_rights_read_user_calendar__ok__as_lawrence(self):
+    def test_func__rights_read_user_calendar__ok__as_lawrence(self):
         radicale_base_url = self._get_base_url()
         client = caldav.DAVClient(
             radicale_base_url,
         except AuthorizationError:
             ok_(False, 'User should not access that')
 
-    def test_func__radicale_rights_read_user_calendar__fail__as_john_doe(self):
+    def test_func__rights_read_user_calendar__fail__as_john_doe(self):
         radicale_base_url = self._get_base_url()
         client = caldav.DAVClient(
             radicale_base_url,
             ok_(False, 'User can\'t acces other user calendar')
         except AuthorizationError:
             ok_(True, 'User should not acces other user calendar')
+
+    def test_func__rights_read_workspace_calendar__ok__as_owner(self):
+        lawrence = DBSession.query(User).filter(
+            User.email == 'lawrence-not-real-email@fsf.local'
+        ).one()
+        workspace = WorkspaceApi(lawrence).create_workspace(
+            'workspace_1',
+            save_now=False
+        )
+        workspace.calendar_enabled = True
+        DBSession.flush()
+
+        workspace_calendar_url = self._get_workspace_calendar_url(
+            workspace.workspace_id
+        )
+
+        transaction.commit()
+
+        radicale_base_url = self._get_base_url()
+        client = caldav.DAVClient(
+            radicale_base_url,
+            username='lawrence-not-real-email@fsf.local',
+            password='foobarbaz'
+        )
+        try:
+            caldav.Calendar(
+                parent=client,
+                client=client,
+                url=workspace_calendar_url
+            ).events()
+
+            ok_(True, 'User can acces own workspace calendar')
+        except AuthorizationError:
+            ok_(False, 'User should not acces own workspace calendar')
+
+    def test_func__rights_read_workspace_calendar__fail__as_unauthorized(self):
+        lawrence = DBSession.query(User).filter(
+            User.email == 'lawrence-not-real-email@fsf.local'
+        ).one()
+        workspace = WorkspaceApi(lawrence).create_workspace(
+            'workspace_1',
+            save_now=False
+        )
+        workspace.calendar_enabled = True
+        DBSession.flush()
+
+        workspace_calendar_url = self._get_workspace_calendar_url(
+            workspace.workspace_id
+        )
+
+        transaction.commit()
+
+        radicale_base_url = self._get_base_url()
+        client = caldav.DAVClient(
+            radicale_base_url,
+            username='bob@fsf.local',
+            password='foobarbaz'
+        )
+        try:
+            caldav.Calendar(
+                parent=client,
+                client=client,
+                url=workspace_calendar_url
+            ).events()
+
+            ok_(False, 'User can\'t access unright workspace calendar')
+        except AuthorizationError:
+            ok_(True, 'User should not access unright workspace calendar')