public static async Task <ApiConversation <Common.Dto.ErrorResponse> > ReadAndAssertExpectForbidden(RestHelper restHelper, string url)
{
var conversation = await Read <Common.Dto.ErrorResponse>(restHelper, url);
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(conversation.Response);
return(conversation);
}
public async Task Throw_IfUserLacksRequiredRole(bool isEmployee, bool isDatasetAdmin)
{
SetScenario(isEmployee: isEmployee, isDatasetAdmin: isDatasetAdmin);
var studyCreateConversation = await StudyCreator.CreateAndExpectFailure(_restHelper);
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(studyCreateConversation.Response, "does not have permission to perform operation");
}
async Task PerformTestExpectForbidden(int studyId)
{
var updateRequest = new StudyDto()
{
Name = "newName", Vendor = "newVendor"
};
var studyDeleteConversation = await StudyUpdater.UpdateAndExpectFailure(_restHelper, studyId, updateRequest);
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(studyDeleteConversation.Response, "does not have permission to perform operation");
}
async Task PerformTestsExpectFailure(int studyId, params string[] rolesToAdd)
{
var responseDto = StudyParticipantAdderAndRemover.CreateParticipantLookupDto();
foreach (var curRole in rolesToAdd)
{
var studyParticipantAddConversation = await StudyParticipantAdderAndRemover.AddAndExpectFailure(_restHelper, studyId, curRole, responseDto);
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(studyParticipantAddConversation.Response);
}
}
public async Task Read_Study_WithoutRelevantRoles_ShouldFail(bool employee, bool isSponsor, bool datasetAdmin)
{
SetScenario(isEmployee: employee, isSponsor: isSponsor, isDatasetAdmin: datasetAdmin);
await WithUserSeeds();
var createdStudy = await WithStudyCreatedByOtherUser(restricted : true);
var studyReadConversation = await GenericReader.ReadExpectFailure(_restHelper, GenericReader.StudyUrl(createdStudy.Id));
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(studyReadConversation.Response, "does not have permission to perform operation");
}
async Task PerformTestExpectForbidden(int studyId)
{
var studyReadConversation = await GenericDeleter.DeleteAndExpectFailure(_restHelper, GenericDeleter.StudyUrl(studyId));
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(studyReadConversation.Response);
}
async Task PerformTestsExpectFailure(int sandboxId)
{
var sandboxCreateConversation = await GenericPoster.PostAndExpectFailure(_restHelper, GenericPoster.SandboxNextPhase(sandboxId));
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(sandboxCreateConversation.Response);
}
async Task PerformTestsExpectFailure(int studyId, string roleToRemove)
{
var studyParticipantRemoveConversation = await StudyParticipantAdderAndRemover.RemoveAndExpectFailure(_restHelper, studyId, TestUserConstants.COMMON_NEW_PARTICIPANT_DB_ID, roleToRemove);
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(studyParticipantRemoveConversation.Response);
}
async Task PerformTestsExpectFailure(int studyId)
{
var sandboxCreateConversation = await SandboxCreator.CreateAndExpectFailure(_restHelper, studyId);
ApiResponseBasicAsserts.ExpectForbiddenWithMessage(sandboxCreateConversation.Response);
}
