3527b0a75b
* New user model (used Django's AbstractBaseUser) * Renamed the app to users * removed person api See #861 Fixed #576 #478
218 lines
8.9 KiB
Python
218 lines
8.9 KiB
Python
import re
|
|
|
|
from django.contrib.auth.models import Permission
|
|
from django.contrib.contenttypes.models import ContentType
|
|
from django.test.client import Client
|
|
|
|
from openslides.config.api import config
|
|
from openslides.users.api import get_registered_group
|
|
from openslides.users.models import Group, User
|
|
from openslides.utils.test import TestCase
|
|
|
|
|
|
class UserViews(TestCase):
|
|
"""
|
|
Tests some views for users.
|
|
"""
|
|
def setUp(self):
|
|
self.admin = User.objects.get(pk=1)
|
|
self.client = Client()
|
|
self.client.login(username='admin', password='admin')
|
|
|
|
def test_create(self):
|
|
response = self.client.get('/user/new/')
|
|
|
|
self.assertTemplateUsed(response, 'users/user_form.html')
|
|
self.assertContains(response, 'New user')
|
|
response = self.client.post('/user/new/', {'first_name': 'test_name_ho8hui2niz4nohSupahb'})
|
|
self.assertRedirects(response, '/user/')
|
|
|
|
def test_create_multiple(self):
|
|
response = self.client.get('/user/new_multiple/')
|
|
self.assertTemplateUsed(response, 'users/user_form_multiple.html')
|
|
self.assertContains(response, 'New multiple users')
|
|
self.assertEqual(User.objects.count(), 1)
|
|
block = ('first_name_ksdjfhkjsdhf75utgeitrten last_name_khonizt958zh8fh\n'
|
|
'first_name_1_bmgnf7z8ru first_name_2_kjc98vivt last_name_dfg76kjkjuibv')
|
|
response = self.client.post('/user/new_multiple/',
|
|
{'users_block': block})
|
|
self.assertEqual(User.objects.count(), 3)
|
|
|
|
def test_update(self):
|
|
response = self.client.get('/user/1/edit/')
|
|
|
|
self.assertTemplateUsed(response, 'users/user_form.html')
|
|
self.assertContains(response, 'Edit user')
|
|
|
|
response = self.client.post(
|
|
'/user/1/edit/',
|
|
{'username': 'test_name_unaewae5Ir0saijeac2I',
|
|
'first_name': 'test_name_aJi5jaizaVingaeF3Ohj',
|
|
'groups': '4',
|
|
'is_active': 'yes'})
|
|
|
|
self.assertRedirects(response, '/user/')
|
|
|
|
def test_activate(self):
|
|
response = self.client.get('/user/1/status/activate/')
|
|
self.assertEqual(response.status_code, 302)
|
|
|
|
|
|
class GroupViews(TestCase):
|
|
"""
|
|
Tests the detail view for groups and later also the other views.
|
|
"""
|
|
def setUp(self):
|
|
self.user_1 = User.objects.get(pk=1)
|
|
self.user_1.first_name = 'admins_first_name'
|
|
self.user_1.save()
|
|
|
|
self.user_2 = User.objects.create(last_name='uquahx3Wohtieph9baer',
|
|
first_name='aWei4ien6Se0vie0xeiv',
|
|
username='aWei4ien6Se0vie0xeiv uquahx3Wohtieph9baer')
|
|
self.delegate = Group.objects.get(pk=3)
|
|
self.user_1.groups.add(self.delegate)
|
|
self.user_2.groups.add(self.delegate)
|
|
|
|
self.client = Client()
|
|
self.client.login(username='admin', password='admin')
|
|
|
|
def test_detail(self):
|
|
response = self.client.get('/user/group/3/')
|
|
pattern = r'admins_first_name Administrator|aWei4ien6Se0vie0xeiv uquahx3Wohtieph9baer'
|
|
match = re.findall(pattern, response.content.decode('utf8'))
|
|
self.assertEqual(match[0], 'admins_first_name Administrator')
|
|
self.assertEqual(match[1], 'aWei4ien6Se0vie0xeiv uquahx3Wohtieph9baer')
|
|
|
|
config['users_sort_users_by_first_name'] = True
|
|
self.assertTrue(config['users_sort_users_by_first_name'])
|
|
response = self.client.get('/user/group/3/')
|
|
pattern = r'admins_first_name Administrator|aWei4ien6Se0vie0xeiv uquahx3Wohtieph9baer'
|
|
match = re.findall(pattern, response.content.decode('utf8'))
|
|
self.assertEqual(match[1], 'admins_first_name Administrator')
|
|
self.assertEqual(match[0], 'aWei4ien6Se0vie0xeiv uquahx3Wohtieph9baer')
|
|
|
|
def test_create(self):
|
|
response = self.client.get('/user/group/new/')
|
|
|
|
self.assertTemplateUsed(response, 'users/group_form.html')
|
|
self.assertContains(response, 'New group')
|
|
|
|
response = self.client.post('/user/group/new/', {'name': 'test_group_name_Oeli1aeXoobohv8eikai'})
|
|
|
|
self.assertRedirects(response, '/user/group/')
|
|
|
|
def test_update(self):
|
|
response = self.client.get('/user/group/1/edit/')
|
|
|
|
self.assertTemplateUsed(response, 'users/group_form.html')
|
|
self.assertContains(response, 'Edit group')
|
|
|
|
response = self.client.post('/user/group/1/edit/', {'name': 'test_group_name_ahFeicoz5jedie4Fop0U'})
|
|
|
|
self.assertRedirects(response, '/user/group/')
|
|
|
|
|
|
class LockoutProtection(TestCase):
|
|
"""
|
|
Tests that a manager user can not lockout himself by doing
|
|
something that removes his last permission to manage users. Tests
|
|
also that he can see the user app (although there is no absolute
|
|
protection).
|
|
"""
|
|
def setUp(self):
|
|
self.user = User.objects.get(pk=1)
|
|
self.user.groups.add(Group.objects.get(pk=4))
|
|
self.client = Client()
|
|
self.client.login(username='admin', password='admin')
|
|
self.assertEqual(User.objects.count(), 1)
|
|
self.assertEqual(Group.objects.count(), 4)
|
|
self.assertFalse(self.user.is_superuser)
|
|
|
|
def test_delete_yourself(self):
|
|
response = self.client.get('/user/1/del/')
|
|
self.assertRedirects(response, '/user/1/')
|
|
self.assertTrue('You can not delete yourself.' in response.cookies['messages'].value)
|
|
response = self.client.post('/user/1/del/',
|
|
{'yes': 'yes'})
|
|
self.assertTrue('You can not delete yourself.' in response.cookies['messages'].value)
|
|
self.assertRedirects(response, '/user/')
|
|
self.assertEqual(User.objects.count(), 1)
|
|
|
|
def test_delete_last_manager_group(self):
|
|
response = self.client.get('/user/group/4/del/')
|
|
self.assertRedirects(response, '/user/group/4/')
|
|
self.assertTrue('You can not delete the last group containing the permission '
|
|
'to manage users you are in.' in response.cookies['messages'].value)
|
|
response = self.client.post('/user/group/4/del/',
|
|
{'yes': 'yes'})
|
|
self.assertTrue('You can not delete the last group containing the permission '
|
|
'to manage users you are in.' in response.cookies['messages'].value)
|
|
self.assertRedirects(response, '/user/group/')
|
|
self.assertEqual(Group.objects.count(), 4)
|
|
|
|
def test_remove_user_from_last_manager_group_via_UserUpdateView(self):
|
|
response = self.client.post('/user/1/edit/',
|
|
{'username': 'arae0eQu8eeghoogeik0',
|
|
'groups': '3'})
|
|
self.assertFormError(
|
|
response=response,
|
|
form='form',
|
|
field=None,
|
|
errors='You can not remove the last group containing the permission to manage users.')
|
|
|
|
def test_remove_user_from_last_manager_group_via_GroupUpdateView(self):
|
|
User.objects.get_or_create(username='foo', pk=2)
|
|
response = self.client.post('/user/group/4/edit/',
|
|
{'name': 'ChaeFaev4leephaiChae',
|
|
'users': '2'})
|
|
self.assertFormError(
|
|
response=response,
|
|
form='form',
|
|
field=None,
|
|
errors='You can not remove yourself from the last group containing the permission to manage users.')
|
|
|
|
def test_remove_perm_from_last_manager_group(self):
|
|
response = self.client.post('/user/group/4/edit/',
|
|
{'name': 'ChaeFaev4leephaiChae',
|
|
'users': '1',
|
|
'permissions': []})
|
|
self.assertFormError(
|
|
response=response,
|
|
form='form',
|
|
field=None,
|
|
errors='You can not remove the permission to manage users from the last group you are in.')
|
|
|
|
def test_remove_permission_can_see_user_from_registered(self):
|
|
self.assertTrue(self.user.has_perm('users.can_see'))
|
|
# Remove perm from registered group
|
|
can_see_perm = Permission.objects.get(
|
|
content_type=ContentType.objects.get(app_label='users', model='user'),
|
|
codename='can_see')
|
|
get_registered_group().permissions.remove(can_see_perm)
|
|
# Reload user
|
|
self.user = User.objects.get(pk=1)
|
|
self.assertTrue(self.user.has_perm('users.can_see'))
|
|
|
|
|
|
class TestUserSettings(TestCase):
|
|
def setUp(self):
|
|
self.admin = User.objects.get(pk=1)
|
|
self.admin_client = Client()
|
|
self.admin_client.login(username='admin', password='admin')
|
|
|
|
def test_get(self):
|
|
response = self.admin_client.get('/usersettings/')
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
def test_post(self):
|
|
response = self.admin_client.post('/usersettings/', {
|
|
'username': 'new_name',
|
|
'language': 'de'})
|
|
|
|
self.assertRedirects(response, '/usersettings/')
|
|
|
|
admin = User.objects.get(pk=1)
|
|
|
|
self.assertEqual(admin.username, 'new_name')
|