feat(environments): Environment switcher, behind flag (#25009)

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

ee/api/test/test_project.py

@@ -3,6 +3,8 @@
 from posthog.models.organization import Organization, OrganizationMembership
 from posthog.models.project import Project
 from posthog.models.team.team import Team
+from posthog.models.user import User
+from posthog.test.base import FuzzyInt
 
 
 class TestProjectEnterpriseAPI(team_enterprise_api_test_factory()):
@@ -14,6 +16,46 @@ class TestProjectEnterpriseAPI(team_enterprise_api_test_factory()):
 
     client_class = EnvironmentToProjectRewriteClient
 
+    def test_create_team(self):
+        self.organization_membership.level = OrganizationMembership.Level.ADMIN
+        self.organization_membership.save()
+        self.assertEqual(Team.objects.count(), 1)
+        self.assertEqual(Project.objects.count(), 1)
+        response = self.client.post("/api/projects/@current/environments/", {"name": "Test"})
+        self.assertEqual(response.status_code, 201)
+        self.assertEqual(Team.objects.count(), 2)
+        self.assertEqual(Project.objects.count(), 2)
+        response_data = response.json()
+        self.assertDictContainsSubset(
+            {
+                "name": "Test",
+                "access_control": False,
+                "effective_membership_level": OrganizationMembership.Level.ADMIN,
+            },
+            response_data,
+        )
+        self.assertEqual(self.organization.teams.count(), 2)
+
+    def test_create_team_with_access_control(self):
+        self.organization_membership.level = OrganizationMembership.Level.ADMIN
+        self.organization_membership.save()
+        self.assertEqual(Team.objects.count(), 1)
+        self.assertEqual(Project.objects.count(), 1)
+        response = self.client.post("/api/projects/@current/environments/", {"name": "Test", "access_control": True})
+        self.assertEqual(response.status_code, 201)
+        self.assertEqual(Team.objects.count(), 2)
+        self.assertEqual(Project.objects.count(), 2)
+        response_data = response.json()
+        self.assertDictContainsSubset(
+            {
+                "name": "Test",
+                "access_control": True,
+                "effective_membership_level": OrganizationMembership.Level.ADMIN,
+            },
+            response_data,
+        )
+        self.assertEqual(self.organization.teams.count(), 2)
+
     def test_user_create_project_for_org_via_url(self):
         # Set both current and new org to high enough membership level
         self.organization_membership.level = OrganizationMembership.Level.ADMIN
@@ -46,3 +88,83 @@ def test_user_cannot_create_project_in_org_without_access(self):
         response = self.client.post(f"/api/organizations/{other_org.id}/projects/", {"name": "Via path org"})
         self.assertEqual(response.status_code, 403, msg=response.json())
         assert response.json() == self.permission_denied_response("Your organization access level is insufficient.")
+
+    def test_user_that_does_not_belong_to_an_org_cannot_create_a_projec(self):
+        user = User.objects.create(email="[email protected]")
+        self.client.force_login(user)
+
+        response = self.client.post("/api/projects/", {"name": "Test"})
+        self.assertEqual(response.status_code, 404, response.content)
+        self.assertEqual(
+            response.json(),
+            {
+                "type": "invalid_request",
+                "code": "not_found",
+                "detail": "You need to belong to an organization.",
+                "attr": None,
+            },
+        )
+
+    def test_list_projects_restricted_ones_hidden(self):
+        self.organization_membership.level = OrganizationMembership.Level.MEMBER
+        self.organization_membership.save()
+        Team.objects.create(
+            organization=self.organization,
+            name="Other",
+            access_control=True,
+        )
+
+        # The other team should not be returned as it's restricted for the logged-in user
+        projects_response = self.client.get(f"/api/environments/")
+
+        # 9 (above):
+        with self.assertNumQueries(FuzzyInt(10, 11)):
+            current_org_response = self.client.get(f"/api/organizations/{self.organization.id}/")
+
+        self.assertEqual(projects_response.status_code, 200)
+        self.assertEqual(
+            projects_response.json().get("results"),
+            [
+                {
+                    "id": self.team.id,
+                    "uuid": str(self.team.uuid),
+                    "organization": str(self.organization.id),
+                    "api_token": self.team.api_token,
+                    "name": self.team.name,
+                    "completed_snippet_onboarding": False,
+                    "has_completed_onboarding_for": {"product_analytics": True},
+                    "ingested_event": False,
+                    "is_demo": False,
+                    "timezone": "UTC",
+                    "access_control": False,
+                }
+            ],
+        )
+        self.assertEqual(current_org_response.status_code, 200)
+        self.assertEqual(
+            current_org_response.json().get("teams"),
+            [
+                {
+                    "id": self.team.id,
+                    "uuid": str(self.team.uuid),
+                    "organization": str(self.organization.id),
+                    "project_id": self.team.project.id,  # type: ignore
+                    "api_token": self.team.api_token,
+                    "name": self.team.name,
+                    "completed_snippet_onboarding": False,
+                    "has_completed_onboarding_for": {"product_analytics": True},
+                    "ingested_event": False,
+                    "is_demo": False,
+                    "timezone": "UTC",
+                    "access_control": False,
+                }
+            ],
+        )
+
+    def test_cannot_create_project_in_org_without_access(self):
+        self.organization_membership.delete()
+
+        response = self.client.post(f"/api/organizations/{self.organization.id}/projects/", {"name": "Test"})
+
+        self.assertEqual(response.status_code, 404, response.json())
+        self.assertEqual(response.json(), self.not_found_response("Organization not found."))