from httpx import AsyncClient async def test_nested_box_restrict_delete_and_cycle_prevention( client: AsyncClient, auth_headers: dict[str, str] ) -> None: parent_res = await client.post("/api/v1/boxes", headers=auth_headers, json={"name": "Parent"}) parent_id = parent_res.json()["id"] child_res = await client.post( "/api/v1/boxes", headers=auth_headers, json={"name": "Child", "parent_box_id": parent_id} ) child_id = child_res.json()["id"] # Cannot delete a box that still has children. delete_res = await client.delete(f"/api/v1/boxes/{parent_id}", headers=auth_headers) assert delete_res.status_code == 409 # Cannot move a box into its own descendant. cycle_res = await client.put( f"/api/v1/boxes/{parent_id}", headers=auth_headers, json={"parent_box_id": child_id} ) assert cycle_res.status_code == 409 box_detail = await client.get(f"/api/v1/boxes/{child_id}") assert box_detail.json()["ancestors"] == [{"id": parent_id, "name": "Parent"}] await client.delete(f"/api/v1/boxes/{child_id}", headers=auth_headers) await client.delete(f"/api/v1/boxes/{parent_id}", headers=auth_headers) async def test_deleting_box_unassigns_objects(client: AsyncClient, auth_headers: dict[str, str]) -> None: box_res = await client.post("/api/v1/boxes", headers=auth_headers, json={"name": "Temp box"}) box_id = box_res.json()["id"] obj_res = await client.post( "/api/v1/objects", headers=auth_headers, json={"inventory_number": "BOX-TEST-1", "name": "In a box", "box_id": box_id}, ) object_id = obj_res.json()["id"] assert obj_res.json()["box_id"] == box_id await client.delete(f"/api/v1/boxes/{box_id}", headers=auth_headers) obj_after = await client.get(f"/api/v1/objects/{object_id}") assert obj_after.json()["box_id"] is None await client.delete(f"/api/v1/objects/{object_id}", headers=auth_headers)