Use Fairphone staff client instead of admin user for tests

Run tests against the REST API using a client that is related to a
Fairphone staff user instead of an admin user.

Issue: HIC-249
Change-Id: I33666235ff186fef566bdb0aa6e7a9c768856949
diff --git a/crashreports/tests/test_rest_api_devices.py b/crashreports/tests/test_rest_api_devices.py
index d023ce5..512a56a 100644
--- a/crashreports/tests/test_rest_api_devices.py
+++ b/crashreports/tests/test_rest_api_devices.py
@@ -89,7 +89,7 @@
             str(self._register_device()[0]) for _ in range(number_of_devices)
         ]
 
-        response = self.admin.get(reverse(self.LIST_CREATE_URL), {})
+        response = self.fp_staff_client.get(reverse(self.LIST_CREATE_URL), {})
         self.assertEqual(response.status_code, status.HTTP_200_OK)
         self.assertEqual(len(response.data["results"]), number_of_devices)
         for result in response.data["results"]:
@@ -101,9 +101,11 @@
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
 
     def test_retrieve_device_auth(self):
-        """Test retrieval of devices as admin user."""
+        """Test retrieval of devices as Fairphone staff user."""
         uuid, _, token = self._register_device()
-        response = self.admin.get(reverse(self.RETRIEVE_URL, args=[uuid]), {})
+        response = self.fp_staff_client.get(
+            reverse(self.RETRIEVE_URL, args=[uuid]), {}
+        )
         self.assertEqual(response.status_code, status.HTTP_200_OK)
         self.assertEqual(response.data["uuid"], str(uuid))
         self.assertEqual(response.data["token"], token)
@@ -115,10 +117,10 @@
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
 
     def test_delete_device_auth(self):
-        """Test deletion of devices as admin user."""
+        """Test deletion of devices as Fairphone staff user."""
         uuid, _, _ = self._register_device()
         url = reverse(self.RETRIEVE_URL, args=[uuid])
-        response = self.admin.delete(url, {})
+        response = self.fp_staff_client.delete(url, {})
         self.assertEqual(response.status_code, status.HTTP_204_NO_CONTENT)
-        response = self.admin.delete(url, {})
+        response = self.fp_staff_client.delete(url, {})
         self.assertEqual(response.status_code, status.HTTP_404_NOT_FOUND)
diff --git a/crashreports/tests/test_rest_api_heartbeats.py b/crashreports/tests/test_rest_api_heartbeats.py
index 04b7477..c4e72d3 100644
--- a/crashreports/tests/test_rest_api_heartbeats.py
+++ b/crashreports/tests/test_rest_api_heartbeats.py
@@ -28,7 +28,7 @@
 
     def _retrieve_single(self, user):
         count = 5
-        response = self._post_multiple(self.admin, self.data, count)
+        response = self._post_multiple(self.fp_staff_client, self.data, count)
         self.assertEqual(len(response), count)
         self.assertEqual(response[0].status_code, status.HTTP_201_CREATED)
         url = reverse(self.RETRIEVE_URL, args=[response[0].data["id"]])
@@ -59,15 +59,17 @@
         response = noauth_client.post(reverse(self.LIST_CREATE_URL), self.data)
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
 
-    def test_create_as_admin(self):
-        """Test creation as admin."""
-        response = self.admin.post(reverse(self.LIST_CREATE_URL), self.data)
+    def test_create_as_fp_staff(self):
+        """Test creation as Fairphone staff."""
+        response = self.fp_staff_client.post(
+            reverse(self.LIST_CREATE_URL), self.data
+        )
         self.assertEqual(response.status_code, status.HTTP_201_CREATED)
         self.assertTrue(response.data["id"] > 0)
 
-    def test_create_as_admin_not_existing_device(self):
+    def test_create_as_fp_staff_not_existing_device(self):
         """Test creation of heartbeat on non-existing device."""
-        response = self.admin.post(
+        response = self.fp_staff_client.post(
             reverse(self.LIST_CREATE_URL), self._create_dummy_data()
         )
         self.assertEqual(response.status_code, status.HTTP_404_NOT_FOUND)
@@ -93,13 +95,15 @@
         """Test listing of heartbeats."""
         count = 5
         self._post_multiple(self.user, self.data, count)
-        response = self.admin.get(reverse(self.LIST_CREATE_URL))
+        response = self.fp_staff_client.get(reverse(self.LIST_CREATE_URL))
         self.assertEqual(response.status_code, status.HTTP_200_OK)
         self.assertEqual(len(response.data["results"]), count)
 
-    def test_retrieve_single_admin(self):
-        """Test retrieval as admin."""
-        self.assertEqual(self._retrieve_single(self.admin), status.HTTP_200_OK)
+    def test_retrieve_single_fp_staff(self):
+        """Test retrieval as Fairphone staff."""
+        self.assertEqual(
+            self._retrieve_single(self.fp_staff_client), status.HTTP_200_OK
+        )
 
     def test_retrieve_single_device_owner(self):
         """Test retrieval as device owner."""
@@ -114,10 +118,11 @@
             self._retrieve_single(noauth_client), status.HTTP_401_UNAUTHORIZED
         )
 
-    def test_retrieve_single_by_device_admin(self):
-        """Test retrieval by device as admin."""
+    def test_retrieve_single_by_device_fp_staff(self):
+        """Test retrieval by device as Fairphone staff."""
         self.assertEqual(
-            self._retrieve_single_by_device(self.admin), status.HTTP_200_OK
+            self._retrieve_single_by_device(self.fp_staff_client),
+            status.HTTP_200_OK,
         )
 
     def test_retrieve_single_by_device_device_owner(self):
@@ -141,10 +146,10 @@
         uuid, _, _ = self._register_device()
         self._post_multiple(self.user, self.data, count)
         self._post_multiple(
-            self.admin, self._create_dummy_data(uuid=uuid), count
+            self.fp_staff_client, self._create_dummy_data(uuid=uuid), count
         )
         url = reverse(self.LIST_CREATE_BY_UUID_URL, args=[self.uuid])
-        response = self.admin.get(url)
+        response = self.fp_staff_client.get(url)
         self.assertEqual(response.status_code, status.HTTP_200_OK)
         self.assertEqual(len(response.data["results"]), count)
 
@@ -170,7 +175,7 @@
         response = self.user.post(reverse(self.LIST_CREATE_URL), data)
         self.assertEqual(response.status_code, status.HTTP_201_CREATED)
         url = reverse(self.LIST_CREATE_BY_UUID_URL, args=[self.uuid])
-        response = self.admin.get(url)
+        response = self.fp_staff_client.get(url)
         self.assertEqual(response.status_code, status.HTTP_200_OK)
         self.assertEqual(len(response.data["results"]), 1)
         self.assertIsNone(response.data["results"][0]["radio_version"])
@@ -180,7 +185,7 @@
         response = self.user.post(reverse(self.LIST_CREATE_URL), self.data)
         self.assertEqual(response.status_code, status.HTTP_201_CREATED)
         url = reverse(self.LIST_CREATE_BY_UUID_URL, args=[self.uuid])
-        response = self.admin.get(url)
+        response = self.fp_staff_client.get(url)
         self.assertEqual(response.status_code, status.HTTP_200_OK)
         self.assertEqual(len(response.data["results"]), 1)
         self.assertEqual(
diff --git a/crashreports/tests/test_rest_api_logfiles.py b/crashreports/tests/test_rest_api_logfiles.py
index 56c6f1c..afe8abb 100644
--- a/crashreports/tests/test_rest_api_logfiles.py
+++ b/crashreports/tests/test_rest_api_logfiles.py
@@ -98,9 +98,9 @@
         """Test upload of logfiles as device owner."""
         self._test_logfile_upload(self.user, self.device_uuid)
 
-    def test_logfile_upload_as_admin(self):
-        """Test upload of logfiles as admin user."""
-        self._test_logfile_upload(self.admin, self.device_uuid)
+    def test_logfile_upload_as_fp_staff(self):
+        """Test upload of logfiles as Fairphone staff user."""
+        self._test_logfile_upload(self.fp_staff_client, self.device_uuid)
 
     def tearDown(self):
         """Remove the file and directories that were created for the test."""
diff --git a/crashreports/tests/utils.py b/crashreports/tests/utils.py
index 15ace6b..1202fce 100644
--- a/crashreports/tests/utils.py
+++ b/crashreports/tests/utils.py
@@ -3,12 +3,13 @@
 import os
 from typing import Optional
 
-from django.contrib.auth.models import User
+from django.contrib.auth.models import User, Group
 from django.urls import reverse
 from rest_framework import status
 from rest_framework.test import APITestCase, APIClient
 
 from crashreports.models import Crashreport
+from hiccup.allauth_adapters import FP_STAFF_GROUP_NAME
 
 DEFAULT_DUMMY_LOG_FILE_DIRECTORY = os.path.join("resources", "test")
 
@@ -137,16 +138,18 @@
     REGISTER_DEVICE_URL = "api_v1_register_device"
 
     def setUp(self):
-        """Create an admin user for accessing the API.
+        """Create a Fairphone staff user for accessing the API.
 
         The APIClient that can be used to make authenticated requests to the
-        server is stored in self.admin.
+        server is stored in self.fp_staff_client.
         """
-        admin_user = User.objects.create_superuser(
-            "somebody", "somebody@example.com", "thepassword"
+        fp_staff_group = Group.objects.get(name=FP_STAFF_GROUP_NAME)
+        fp_staff_user = User.objects.create_user(
+            "fp_staff", "somebody@fairphone.com", "thepassword"
         )
-        self.admin = APIClient()
-        self.admin.force_authenticate(admin_user)
+        fp_staff_user.groups.add(fp_staff_group)
+        self.fp_staff_client = APIClient()
+        self.fp_staff_client.force_login(fp_staff_user)
 
     def _register_device(self, **kwargs):
         """Register a new device.