From e4c5e645741bae5be2137e5b6a66fd5d5000a512 Mon Sep 17 00:00:00 2001
From: Christophe Monniez <moc@odoo.com>
Date: Thu, 29 Feb 2024 16:13:08 +0100
Subject: [PATCH] [IMP] runbot: add tests for web_search_read

---
 runbot/tests/__init__.py             |  1 +
 runbot/tests/test_web_search_read.py | 32 ++++++++++++++++++++++++++++
 2 files changed, 33 insertions(+)
 create mode 100644 runbot/tests/test_web_search_read.py

diff --git a/runbot/tests/__init__.py b/runbot/tests/__init__.py
index 188387ca..6fd7cc02 100644
--- a/runbot/tests/__init__.py
+++ b/runbot/tests/__init__.py
@@ -15,3 +15,4 @@ from . import test_commit
 from . import test_upgrade
 from . import test_dockerfile
 from . import test_host
+from . import test_web_search_read
diff --git a/runbot/tests/test_web_search_read.py b/runbot/tests/test_web_search_read.py
new file mode 100644
index 00000000..077e2541
--- /dev/null
+++ b/runbot/tests/test_web_search_read.py
@@ -0,0 +1,32 @@
+import json
+import logging
+
+from unittest.mock import patch, mock_open
+
+from odoo.tests.common import Opener, tagged, HttpCase, new_test_user
+from .common import RunbotCase
+
+_logger = logging.getLogger(__name__)
+
+
+@tagged('-at_install', 'post_install')
+class TestWebsearchReadAccess(RunbotCase, HttpCase):
+
+    def setUp(self):
+        create_context = {'no_reset_password': True, 'mail_create_nolog': True, 'mail_create_nosubscribe': True, 'mail_notrack': True}
+        self.simple_user = new_test_user(self.env, login='simple', name='simple', password='simple', context=create_context)
+
+    def test_user_token(self):
+        poster = Opener(self.cr)
+        res = poster.post(
+            'http://127.0.0.1:8069/runbot/api/web_search_read',
+            data={
+                'uid': 711675,
+                'domain': json.dumps([('id', '=', 1)]),
+                'model': 'runbot.bundle',
+                'specification': json.dumps({'name':{}})
+            }
+        )
+
+        self.assertEqual(res.status_code, 403, 'A non existing user should get a 403')
+        self.assertEqual(res.json(), {'error': 'Unauthorized'})