From a6238c14e3c08b4f7ee7045824eae4e47890ccd3 Mon Sep 17 00:00:00 2001
From: Paul-Christian Volkmer
Date: Wed, 12 Jul 2023 10:11:11 +0200
Subject: Issue #29: Backend-Service für ECOG-Status hinzugefügt

---
 src/test/java/DNPM/DNPMHelperTest.java | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

(limited to 'src/test/java/DNPM/DNPMHelperTest.java')

diff --git a/src/test/java/DNPM/DNPMHelperTest.java b/src/test/java/DNPM/DNPMHelperTest.java
index a90f2fb..cd0b81d 100644
--- a/src/test/java/DNPM/DNPMHelperTest.java
+++ b/src/test/java/DNPM/DNPMHelperTest.java
@@ -3,6 +3,7 @@ package DNPM;
 import DNPM.services.systemtherapie.SystemtherapieService;
 import de.itc.onkostar.api.IOnkostarApi;
 import de.itc.onkostar.api.Item;
+import de.itc.onkostar.api.Patient;
 import de.itc.onkostar.api.Procedure;
 import org.hibernate.SQLQuery;
 import org.hibernate.Session;
@@ -245,6 +246,23 @@ class DNPMHelperTest {
             assertThat(argumentCaptor.getValue()).contains("WHERE patient_id = 2 AND geloescht = 0");
         }
 
+        @Test
+        void testShouldReturnEcogStatusList() {
+            doAnswer(invocationOnMock -> {
+                var id = invocationOnMock.getArgument(0, Integer.class);
+                var patient = new Patient(onkostarApi);
+                patient.setId(id);
+                return patient;
+            }).when(onkostarApi).getPatient(anyInt());
+
+            dnpmHelper.getEcogStatus(Map.of("PatientId", 42));
+
+            var argumentCaptor = ArgumentCaptor.forClass(Patient.class);
+            verify(systemtherapieService, times(1)).ecogSatus(argumentCaptor.capture());
+            assertThat(argumentCaptor.getValue()).isNotNull();
+            assertThat(argumentCaptor.getValue().getId()).isEqualTo(42);
+        }
+
     }
 
 }
-- 
cgit v1.2.3


From 35f1aa0d757900e1a5d22d04ab85c9b22882a07b Mon Sep 17 00:00:00 2001
From: Paul-Christian Volkmer
Date: Mon, 28 Aug 2023 14:39:43 +0200
Subject: Issue #29: Abgesicherter Zugriff auf ECOG Verlauf

---
 src/test/java/DNPM/DNPMHelperTest.java | 30 ++++++++++++++++++++++++++++--
 1 file changed, 28 insertions(+), 2 deletions(-)

(limited to 'src/test/java/DNPM/DNPMHelperTest.java')

diff --git a/src/test/java/DNPM/DNPMHelperTest.java b/src/test/java/DNPM/DNPMHelperTest.java
index cd0b81d..17e8901 100644
--- a/src/test/java/DNPM/DNPMHelperTest.java
+++ b/src/test/java/DNPM/DNPMHelperTest.java
@@ -1,5 +1,8 @@
 package DNPM;
 
+import DNPM.security.IllegalSecuredObjectAccessException;
+import DNPM.security.PermissionType;
+import DNPM.security.PersonPoolBasedPermissionEvaluator;
 import DNPM.services.systemtherapie.SystemtherapieService;
 import de.itc.onkostar.api.IOnkostarApi;
 import de.itc.onkostar.api.Item;
@@ -22,6 +25,7 @@ import java.util.List;
 import java.util.Map;
 
 import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertThrows;
 import static org.mockito.Mockito.*;
 
 @ExtendWith(MockitoExtension.class)
@@ -31,16 +35,20 @@ class DNPMHelperTest {
 
     private SystemtherapieService systemtherapieService;
 
+    private PersonPoolBasedPermissionEvaluator personPoolBasedPermissionEvaluator;
+
     private DNPMHelper dnpmHelper;
 
     @BeforeEach
     void setup(
             @Mock IOnkostarApi onkostarApi,
-            @Mock SystemtherapieService systemtherapieService
+            @Mock SystemtherapieService systemtherapieService,
+            @Mock PersonPoolBasedPermissionEvaluator personPoolBasedPermissionEvaluator
     ) {
         this.onkostarApi = onkostarApi;
         this.systemtherapieService = systemtherapieService;
-        this.dnpmHelper = new DNPMHelper(onkostarApi, systemtherapieService);
+        this.personPoolBasedPermissionEvaluator = personPoolBasedPermissionEvaluator;
+        this.dnpmHelper = new DNPMHelper(onkostarApi, systemtherapieService, personPoolBasedPermissionEvaluator);
     }
 
     @Test
@@ -248,6 +256,9 @@ class DNPMHelperTest {
 
         @Test
         void testShouldReturnEcogStatusList() {
+            when(personPoolBasedPermissionEvaluator.hasPermission(any(), any(Patient.class), any(PermissionType.class)))
+                    .thenReturn(true);
+
             doAnswer(invocationOnMock -> {
                 var id = invocationOnMock.getArgument(0, Integer.class);
                 var patient = new Patient(onkostarApi);
@@ -263,6 +274,21 @@ class DNPMHelperTest {
             assertThat(argumentCaptor.getValue().getId()).isEqualTo(42);
         }
 
+        @Test
+        void testShouldNotReturnEcogStatusListIfNoPermissionGranted() {
+            when(personPoolBasedPermissionEvaluator.hasPermission(any(), any(Patient.class), any(PermissionType.class)))
+                    .thenReturn(false);
+
+            doAnswer(invocationOnMock -> {
+                var id = invocationOnMock.getArgument(0, Integer.class);
+                var patient = new Patient(onkostarApi);
+                patient.setId(id);
+                return patient;
+            }).when(onkostarApi).getPatient(anyInt());
+
+            assertThrows(IllegalSecuredObjectAccessException.class, () -> dnpmHelper.getEcogStatus(Map.of("PatientId", 42)));
+        }
+
     }
 
 }
-- 
cgit v1.2.3