Test that the Site Administrator cannot add a Manager

plone · Sep 22, 2023 · e5bc9b8 · e5bc9b8
1 parent 950706a
commit e5bc9b8
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/src/plone/restapi/tests/test_services_users.py b/src/plone/restapi/tests/test_services_users.py
@@ -1363,3 +1363,18 @@ def test_siteadm_not_delete_manager(self):
         transaction.commit()
 
         self.assertIsNotNone(api.user.get(userid="noam"))
+
+    def test_siteadm_not_add_manager(self):
+        self.set_siteadm()
+        self.api_session.post(
+            "/@users",
+            json={
+                "username": "howard",
+                "email": "[email protected]",
+                "password": "peopleshistory",
+                "roles": ["Manager"],
+            },
+        )
+        transaction.commit()
+
+        self.assertIsNone(api.user.get(userid="howard"))