[ADD] Test for rest iocs permissions to parallel with graphql

dfir-iris · Jan 13, 2025 · bdbf0cb · bdbf0cb
1 parent 86a001a
commit bdbf0cb
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/tests/tests_rest_iocs.py b/tests/tests_rest_iocs.py
@@ -194,3 +194,10 @@ def test_update_ioc_should_return_an_error_when_ioc_type_identifier_is_out_of_ra
         response = self._subject.update(f'/api/v2/cases/{case_identifier}/iocs/{ioc_identifier}', {'ioc_type_id': '123456789'})
         self.assertEqual(400, response.status_code)
 
+    def test_rest_case_should_return_error_ioc_when_permission_denied(self):
+        user = self._subject.create_dummy_user()
+        case_identifier = self._subject.create_dummy_case()
+        body = {'ioc_type_id': 1, 'ioc_tlp_id': 1, 'ioc_value': 'IOC value'}
+        self._subject.create(f'/api/v2/cases/{case_identifier}/iocs', body)
+        response = user.get(f'/api/v2/cases/{case_identifier}/iocs')
+        self.assertEqual(403, response.status_code)