chore: auth* tests for license policy apply product (SecObserve#2269)

Author: StefanFl

backend/unittests/access_control/api/test_authentication.py

@@ -351,6 +351,7 @@ def test_authentication(self, mock_user):
         )
         self._check_authentication(["post"], "/api/license_policies/1/copy/")
         self._check_authentication(["post"], "/api/license_policies/1/apply/")
+        self._check_authentication(["post"], "/api/license_policies/apply_product/")
 
         self._check_authentication(["get", "post"], "/api/license_policy_items/")
         self._check_authentication(

backend/unittests/access_control/api/test_authorization_license_policies.py

@@ -1,3 +1,4 @@
+from application.core.models import Product
 from application.licenses.models import License_Policy
 from unittests.access_control.api.test_authorization import (
     APITest,
@@ -258,6 +259,59 @@ def test_authorization_license_policies(self):
             )
         )
 
+        product_1 = Product.objects.get(pk=1)
+        license_policy_1000 = License_Policy.objects.get(pk=1000)
+        product_1.license_policy = license_policy_1000
+        product_1.save()
+
+        self._test_api(
+            APITest(
+                "db_admin",
+                "post",
+                "/api/license_policies/apply_product/?product=1",
+                None,
+                204,
+                None,
+                no_second_user=False,
+            )
+        )
+
+        self._test_api(
+            APITest(
+                "db_internal_write",
+                "post",
+                "/api/license_policies/apply_product/?product=1",
+                None,
+                204,
+                None,
+                no_second_user=False,
+            )
+        )
+
+        self._test_api(
+            APITest(
+                "db_internal_read",
+                "post",
+                "/api/license_policies/apply_product/?product=1",
+                None,
+                403,
+                None,
+                no_second_user=False,
+            )
+        )
+
+        self._test_api(
+            APITest(
+                "db_external",
+                "post",
+                "/api/license_policies/apply_product/?product=1",
+                None,
+                403,
+                None,
+                no_second_user=False,
+            )
+        )
+
         self._test_api(
             APITest(
                 "db_internal_write",