summaryrefslogtreecommitdiff
path: root/addons/hr_expense/tests/test_expenses_access_rights.py
blob: 01043a7393f301f694818f1b5f197ab93ce53731 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
# -*- coding: utf-8 -*-
# Part of Odoo. See LICENSE file for full copyright and licensing details.
from odoo.addons.hr_expense.tests.common import TestExpenseCommon
from odoo.exceptions import AccessError, UserError
from odoo.tests import tagged


@tagged('-at_install', 'post_install')
class TestExpensesAccessRights(TestExpenseCommon):

    def test_expense_access_rights(self):
        ''' The expense employee can't be able to create an expense for someone else.'''

        expense_employee_2 = self.env['hr.employee'].create({
            'name': 'expense_employee_2',
            'user_id': self.env.user.id,
            'address_home_id': self.env.user.partner_id.id,
            'address_id': self.env.user.partner_id.id,
        })

        with self.assertRaises(AccessError):
            self.env['hr.expense'].with_user(self.expense_user_employee).create({
                'name': "Superboy costume washing",
                'employee_id': expense_employee_2.id,
                'product_id': self.product_a.id,
                'quantity': 1,
                'unit_amount': 1,
            })

    def test_expense_sheet_access_rights_approve(self):

        # The expense employee is able to a create an expense sheet.

        expense_sheet = self.env['hr.expense.sheet'].with_user(self.expense_user_employee).create({
            'name': 'First Expense for employee',
            'employee_id': self.expense_employee.id,
            'journal_id': self.company_data['default_journal_purchase'].id,
            'accounting_date': '2017-01-01',
            'expense_line_ids': [
                (0, 0, {
                    # Expense without foreign currency but analytic account.
                    'name': 'expense_1',
                    'date': '2016-01-01',
                    'product_id': self.product_a.id,
                    'unit_amount': 1000.0,
                    'employee_id': self.expense_employee.id,
                }),
            ],
        })
        self.assertRecordValues(expense_sheet, [{'state': 'draft'}])

        # The expense employee is able to submit the expense sheet.

        expense_sheet.with_user(self.expense_user_employee).action_submit_sheet()
        self.assertRecordValues(expense_sheet, [{'state': 'submit'}])

        # The expense employee is not able to approve itself the expense sheet.

        with self.assertRaises(UserError):
            expense_sheet.with_user(self.expense_user_employee).approve_expense_sheets()
        self.assertRecordValues(expense_sheet, [{'state': 'submit'}])

        # An expense manager is required for this step.

        expense_sheet.with_user(self.expense_user_manager).approve_expense_sheets()
        self.assertRecordValues(expense_sheet, [{'state': 'approve'}])

        # An expense manager is not able to create the journal entry.

        with self.assertRaises(UserError):
            expense_sheet.with_user(self.expense_user_manager).action_sheet_move_create()
        self.assertRecordValues(expense_sheet, [{'state': 'approve'}])

        # An expense manager having accounting access rights is able to create the journal entry.

        expense_sheet.with_user(self.env.user).action_sheet_move_create()
        self.assertRecordValues(expense_sheet, [{'state': 'post'}])

    def test_expense_sheet_access_rights_refuse(self):

        # The expense employee is able to a create an expense sheet.

        expense_sheet = self.env['hr.expense.sheet'].with_user(self.expense_user_employee).create({
            'name': 'First Expense for employee',
            'employee_id': self.expense_employee.id,
            'journal_id': self.company_data['default_journal_purchase'].id,
            'accounting_date': '2017-01-01',
            'expense_line_ids': [
                (0, 0, {
                    # Expense without foreign currency but analytic account.
                    'name': 'expense_1',
                    'date': '2016-01-01',
                    'product_id': self.product_a.id,
                    'unit_amount': 1000.0,
                    'employee_id': self.expense_employee.id,
                }),
            ],
        })
        self.assertRecordValues(expense_sheet, [{'state': 'draft'}])

        # The expense employee is able to submit the expense sheet.

        expense_sheet.with_user(self.expense_user_employee).action_submit_sheet()
        self.assertRecordValues(expense_sheet, [{'state': 'submit'}])

        # The expense employee is not able to refuse itself the expense sheet.

        with self.assertRaises(UserError):
            expense_sheet.with_user(self.expense_user_employee).refuse_sheet('')
        self.assertRecordValues(expense_sheet, [{'state': 'submit'}])

        # An expense manager is required for this step.

        expense_sheet.with_user(self.expense_user_manager).refuse_sheet('')
        self.assertRecordValues(expense_sheet, [{'state': 'cancel'}])