Univention Bugzilla – Bug 35154
ucs-test: check password reset by school admins
Last modified: 2021-03-03 20:43:35 CET
The script 04_ucs-school-reset-password-check checks if the permissions for the password reset for teachers and students are implemented correctly and if the password reset itself works. It should also be tested if the school admin is able to reset passwords. At least the following tests are missing: - school admin should not be able to reset passwords of Domain Admins or global users - school admin should be able to reset passwords of teachers and students - teacher should not be able to reset passwords of school admins - student should not be able to reset passwords of school admins If still missing, a function for creating a school admin should be added to the ucs-test-ucsschool python lib "univention.testing.ucsschool".
A new test script is created with the name: "23_password_reset_by_school_admins" which includes: - test if school admin is able to reset teacher password (chgPwdNextLogin=True) - test if school admin is able to reset student password (chgPwdNextLogin=True) - test if school admin is able to reset teacher password (chgPwdNextLogin=False) - test if school admin is able to reset student password (chgPwdNextLogin=False) - Both flavors 'teacher', 'student' are included. - Testing if the new password works or not is also included. Other test cases: - teacher should not be able to reset passwords of school admins. - student should not be able to reset passwords of school admins. and the like are included in another test script with the name "24_password_reset_by_all_types_of_users" which is mainly made for Bug #35448 so no need to repeat the same tests again. New functions in "univention.testing.ucsschool" were added to create: school admin, domain admin, global admin. Tested on single server and multi server environment.