feat(M02): 개인 · 회사 층 양식 지우기 — DELETE /layers/{층}/templates/{종류}/{이름} · 개인 본인만 · 회사 관리자만 · 시스템 · 프로젝트 거절 · 판 다르면 409 · 이름 검사 400 + 까닭

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015LuapLYqN1GGFD8Y1PStD5

resources/tester/test_m02_template_layers.py

@@ -354,3 +354,51 @@ def test_뼈대_없는_문서는_400으로_거절하고_파일을_안_씀(world:
     table = _url()
     assert client.put(table, json={"판": None, "문서": {}}).status_code == 400
     assert client.put(url, json={"판": version, "문서": {"entities": []}}).status_code == 200
+
+
+def _mine(name: str = "내양식", layer: str = "personal") -> str:
+    return f"/api/m02/layers/{layer}/templates/table/{name}?project_id={P1}"
+
+
+def test_개인_회사_양식_지우기_권한_판_이름_예외(world: dict[str, Any]) -> None:
+    client, session = world["client"], world["session"]
+    doc = {"열": []}
+    for layer in ("personal", "company"):
+        client.put(_mine(layer=layer), json={"판": None, "문서": doc})
+    personal = layers.personal_dir(7, 42) / "table/내양식.json"
+    company = layers.company_dir(7) / "table/내양식.json"
+    assert personal.is_file() and not company.is_file()  # 일반 사용자 회사 저장은 403
+    version = layers.version_of(personal)
+    # 시스템 · 프로젝트 층은 거절
+    for layer in ("system", "project"):
+        assert client.delete(_mine("구조물집계표", layer) + f"&판={version}").status_code == 403
+    assert (_root(world, P1) / "templates/table/구조물집계표.json").is_file()
+    # 이름 예외 · 판 없음 · 판 다름 · 없는 양식
+    for bad in ("%2E%2E", "a%2E%2Eb", "a%2Fb", "a%5Cb", "_initial", ".x", "a*b"):
+        got = client.delete(_mine(bad) + f"&판={version}")
+        assert got.status_code in (400, 404) and personal.is_file(), bad
+    assert client.delete(_mine("a%2Fb") + f"&판={version}").status_code in (400, 404)
+    assert client.delete(_mine()).status_code == 400
+    stale = client.delete(_mine() + "&판=0000000000000000")
+    assert stale.status_code == 409 and stale.json()["detail"]["판"] == version
+    assert client.delete(_mine("없는것") + f"&판={version}").status_code == 404
+    # 다른 회사 사람은 못 지움 · 회사 층은 관리자만
+    assert client.delete(_mine("내양식", "company") + f"&판={version}").status_code == 403
+    # 지움 · 연달아 누르면 둘째는 404 · manifest 줄도 없어짐
+    assert client.delete(_mine() + f"&판={version}").status_code == 200
+    assert not personal.exists()
+    assert client.delete(_mine() + f"&판={version}").status_code == 404
+    session["role"] = "ADMIN"
+    client.put(_mine(layer="company"), json={"판": None, "문서": doc})
+    assert company.is_file()
+    session.update(role="USER")
+    assert (
+        client.delete(_mine(layer="company") + f"&판={layers.version_of(company)}").status_code
+        == 403
+    )
+    session.update(role="ADMIN")
+    assert (
+        client.delete(_mine(layer="company") + f"&판={layers.version_of(company)}").status_code
+        == 200
+    )
+    assert "table/내양식" not in layers.read_manifest(layers.company_dir(7))