From 3f7abc5986b791e9c5d213f0fbae7ad8fb09a633 Mon Sep 17 00:00:00 2001
From: luxferre <chris@sr2.uk>
Date: Mon, 15 Jun 2026 09:33:51 +0100
Subject: [PATCH] tests: preapproval

Issue: #24
---
 test/test_auth_approval.py | 52 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)

diff --git a/test/test_auth_approval.py b/test/test_auth_approval.py
index 3f4dd03..f038e51 100644
--- a/test/test_auth_approval.py
+++ b/test/test_auth_approval.py
@@ -136,3 +136,55 @@ async def test_post_iam_permissions_search_auth_approval(no_su_client: AsyncClie
 	)
 	assert resp.status_code != 422
 	assert "has not been approved." in resp.json()["detail"]
+
+
+@pytest.mark.anyio
+async def test_delete_org_user_auth_approval(no_su_client: AsyncClient):
+	resp = await no_su_client.delete("/org/user?org_id=3&user_id=1")
+
+	assert resp.status_code != 422
+	assert "has not been approved." in resp.json()["detail"]
+
+
+@pytest.mark.anyio
+async def test_delete_preapproval_auth_approval(no_su_client: AsyncClient):
+	resp = await no_su_client.delete("/org/self?org_id=3")
+
+	assert resp.status_code != 422
+	assert resp.status_code == 204
+
+
+@pytest.mark.anyio
+async def test_post_user_invitation_auth_approval(no_su_client: AsyncClient):
+	body = {"user_email": "admin@test.com", "organisation_id": 3}
+	resp = await no_su_client.post("/user/invitation", json=body)
+
+	assert resp.status_code != 422
+	assert "has not been approved." in resp.json()["detail"]
+
+
+@pytest.mark.anyio
+async def test_delete_group_permissions_auth_approval(no_su_client: AsyncClient):
+	resp = await no_su_client.delete(
+		"/iam/group/permission?org_id=3&group_id=1&perm_id=1"
+	)
+
+	assert resp.status_code != 422
+	assert "has not been approved." in resp.json()["detail"]
+
+
+@pytest.mark.anyio
+async def test_delete_group_users_success(no_su_client: AsyncClient):
+	resp = await no_su_client.delete("/iam/group/user?org_id=3&group_id=1&user_id=1")
+
+	assert resp.status_code != 422
+	assert "has not been approved." in resp.json()["detail"]
+
+
+@pytest.mark.anyio
+async def test_put_group_user_invitation_success(no_su_client: AsyncClient):
+	body = {"user_email": "admin@test.com", "organisation_id": 3, "group_id": 1}
+	resp = await no_su_client.put("/iam/group/user/invitation", json=body)
+
+	assert resp.status_code != 422
+	assert "has not been approved." in resp.json()["detail"]