import pytest

from django.apps import apps

from awx.main.migrations import _rbac as rbac
from awx.main.models import (
    UnifiedJobTemplate,
    InventorySource, Inventory,
    JobTemplate, Project,
    Organization,
    User
)


@pytest.mark.django_db
def test_implied_organization_subquery_inventory():
    orgs = []
    for i in range(3):
        orgs.append(Organization.objects.create(name='foo{}'.format(i)))
    orgs.append(orgs[0])
    for i in range(4):
        org = orgs[i]
        if i == 2:
            inventory = Inventory.objects.create(name='foo{}'.format(i))
        else:
            inventory = Inventory.objects.create(name='foo{}'.format(i), organization=org)
        inv_src = InventorySource.objects.create(
            name='foo{}'.format(i),
            inventory=inventory,
            source='ec2'
        )
    sources = UnifiedJobTemplate.objects.annotate(
        test_field=rbac.implicit_org_subquery(UnifiedJobTemplate, InventorySource)
    )
    for inv_src in sources:
        assert inv_src.test_field == inv_src.inventory.organization_id


@pytest.mark.django_db
def test_implied_organization_subquery_job_template():
    jts = []
    for i in range(5):
        if i <= 3:
            org = Organization.objects.create(name='foo{}'.format(i))
        else:
            org = None
        if i <= 4:
            proj = Project.objects.create(
                name='foo{}'.format(i),
                organization=org
            )
        else:
            proj = None
        jts.append(JobTemplate.objects.create(
            name='foo{}'.format(i),
            project=proj
        ))
    # test case of sharing same org
    jts[2].project.organization = jts[3].project.organization
    jts[2].save()
    ujts = UnifiedJobTemplate.objects.annotate(
        test_field=rbac.implicit_org_subquery(UnifiedJobTemplate, JobTemplate)
    )
    for jt in ujts:
        if not isinstance(jt, JobTemplate):  # some are projects
            assert jt.test_field is None
        else:
            if jt.project is None:
                assert jt.test_field is None
            else:
                assert jt.test_field == jt.project.organization_id


@pytest.mark.django_db
def test_give_explicit_inventory_permission():
    dual_admin = User.objects.create(username='alice')
    inv_admin = User.objects.create(username='bob')
    inv_org = Organization.objects.create(name='inv-org')
    proj_org = Organization.objects.create(name='proj-org')

    inv_org.admin_role.members.add(inv_admin, dual_admin)
    proj_org.admin_role.members.add(dual_admin)

    proj = Project.objects.create(
        name="test-proj",
        organization=proj_org
    )
    inv = Inventory.objects.create(
        name='test-inv',
        organization=inv_org
    )

    jt = JobTemplate.objects.create(
        name='foo',
        project=proj,
        inventory=inv
    )

    assert dual_admin in jt.admin_role

    rbac.restore_inventory_admins(apps, None)

    assert inv_admin in jt.admin_role.members.all()
    assert dual_admin not in jt.admin_role.members.all()
    assert dual_admin in jt.admin_role