@@ -1318,20 +1318,23 @@ class TestTeamMemberAssignmentsAPIView(ViewTestMixin):
13181318 lib:Org3:LIB3 → admin_3 (library_admin), regular_5 (library_admin), regular_6 (library_author),
13191319 regular_7 (library_contributor), regular_8 (library_user)
13201320
1321- URL: /authz/v1/users/<username>/assignments
1321+ URL: /api/ authz/v1/users/<username>/assignments/
13221322 Response fields per item: is_superadmin, role, org, scope, permission_count
13231323
13241324 Superadmin entry:
1325- admin_1..3 are staff/superusers. Querying any of them adds one entry
1325+ admin_1..3 are staff/superusers. Querying any of them always adds one
13261326 SuperAdminAssignmentData entry: role="django.superuser" (or "django.staff"),
13271327 org="*", scope="*", permission_count=None, is_superadmin=True.
13281328 This entry is always included regardless of org/role filters, since those
13291329 filters are applied only to the role assignments, not to the superadmin entry.
13301330
13311331 Visibility via filter_allowed_assignments:
1332- - Staff/superuser: sees all assignments for any user
1333- - regular_1 (library_user in Org1:LIB1): sees only Org1:LIB1 assignments
1334- - regular_9 (no assignments): sees nothing for any user
1332+ - Staff/superuser: sees all role assignments for any user, plus the superadmin
1333+ entry when the target is a superadmin.
1334+ - regular_1 (library_user in Org1:LIB1): sees only Org1:LIB1 role assignments,
1335+ plus the superadmin entry when the target is a superadmin.
1336+ - regular_9 (no assignments): sees no role assignments for any user, but still
1337+ sees the superadmin entry when the target is a superadmin.
13351338 """
13361339
13371340 def setUp (self ):
0 commit comments