From 2997f7682e44b06599bb9e90609c42f71112dea1 Mon Sep 17 00:00:00 2001
From: umsangdon <umsangdon@gmail.com>
Date: Mon, 26 Oct 2026 09:17:40 +0900
Subject: [PATCH] =?UTF-8?q?fix(=EC=8B=9C=ED=97=98):=20test=5F302=5F2=20?=
 =?UTF-8?q?=EA=B0=80=EC=A7=9C=20=ED=92=80=20=E2=80=94=20=EC=98=88=EC=A0=95?=
 =?UTF-8?q?=EB=85=B8=EC=84=A0=20=EC=A7=80=EC=A0=95=20=EC=A1=B0=ED=9A=8C?=
 =?UTF-8?q?=EC=97=90=20=EB=B9=88=20=EC=A4=84?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 까닭: 528 공유 판정이 require_project_access 에 plan_route_assignees 조회를 더함 · 가짜 풀이 모든 fetchone 에 회사 줄을 돌려 「지정받은 회사」로 읽힘 → 남의 회사 GET 200
- 코드 구멍 아님 — 진짜 서버(8001) 회사 3 계정: 남 회사 GET 403 · 미지정 예정노선 403 · 지정 예정노선 GET 200 · PUT 403
- 공유 판정 지킴 시험은 test_528 에 있음(지정 GET 200 · PUT 403 · 미지정 403)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 resources/tester/test_302_2_print_drawings.py | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/resources/tester/test_302_2_print_drawings.py b/resources/tester/test_302_2_print_drawings.py
index 2169aa975..ca8d22775 100644
--- a/resources/tester/test_302_2_print_drawings.py
+++ b/resources/tester/test_302_2_print_drawings.py
@@ -219,11 +219,12 @@ class _FakePool:
             async def __aexit__(self, *_):
                 return False
 
-            async def execute(self, *_):
-                return None
+            async def execute(self, sql, *_):
+                self.sql = sql
 
             async def fetchone(self):
-                return pool.row
+                # 예정노선 지정(plan_route_assignees) 없음 — 회사 대조만 시험.
+                return None if "plan_route_assignees" in self.sql else pool.row
 
         class _Connection:
             async def __aenter__(self):