import json from datetime import timedelta from django.utils import timezone from misago.categories.models import Category from misago.readtracker import poststracker from misago.threads import test from misago.threads.models import Thread from misago.threads.test import patch_category_acl, patch_other_category_acl from .test_threads_api import ThreadsApiTestCase class ThreadPatchApiTestCase(ThreadsApiTestCase): def patch(self, api_link, ops): return self.client.patch( api_link, json.dumps(ops), content_type="application/json" ) class ThreadAddAclApiTests(ThreadPatchApiTestCase): def test_add_acl_true(self): """api adds current thread's acl to response""" response = self.patch( self.api_link, [{"op": "add", "path": "acl", "value": True}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertTrue(response_json["acl"]) def test_add_acl_false(self): """if value is false, api won't add acl to the response, but will set empty key""" response = self.patch( self.api_link, [{"op": "add", "path": "acl", "value": False}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertIsNone(response_json["acl"]) class ThreadChangeTitleApiTests(ThreadPatchApiTestCase): @patch_category_acl({"can_edit_threads": 2}) def test_change_thread_title(self): """api makes it possible to change thread title""" response = self.patch( self.api_link, [{"op": "replace", "path": "title", "value": "Lorem ipsum change!"}], ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertEqual(response_json["title"], "Lorem ipsum change!") thread_json = self.get_thread_json() self.assertEqual(thread_json["title"], "Lorem ipsum change!") @patch_category_acl({"can_edit_threads": 0}) def test_change_thread_title_no_permission(self): """api validates permission to change title""" response = self.patch( self.api_link, [{"op": "replace", "path": "title", "value": "Lorem ipsum change!"}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't edit threads in this category." ) @patch_category_acl({"can_edit_threads": 2, "can_close_threads": 0}) def test_change_thread_title_closed_category_no_permission(self): """api test permission to edit thread title in closed category""" self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "title", "value": "Lorem ipsum change!"}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This category is closed. You can't edit threads in it.", ) @patch_category_acl({"can_edit_threads": 2, "can_close_threads": 0}) def test_change_thread_title_closed_thread_no_permission(self): """api test permission to edit closed thread title""" self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "title", "value": "Lorem ipsum change!"}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This thread is closed. You can't edit it." ) @patch_category_acl({"can_edit_threads": 1, "thread_edit_time": 1}) def test_change_thread_title_after_edit_time(self): """api cleans, validates and rejects too short title""" self.thread.started_on = timezone.now() - timedelta(minutes=10) self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "title", "value": "Lorem ipsum change!"}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't edit threads that are older than 1 minute.", ) @patch_category_acl({"can_edit_threads": 2}) def test_change_thread_title_invalid(self): """api cleans, validates and rejects too short title""" response = self.patch( self.api_link, [{"op": "replace", "path": "title", "value": 12}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "Thread title should be at least 5 characters long (it has 2).", ) class ThreadPinGloballyApiTests(ThreadPatchApiTestCase): @patch_category_acl({"can_pin_threads": 2}) def test_pin_thread(self): """api makes it possible to pin globally thread""" response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 2}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertEqual(response_json["weight"], 2) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 2) @patch_category_acl({"can_pin_threads": 2, "can_close_threads": 0}) def test_pin_thread_closed_category_no_permission(self): """api checks if category is closed""" self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 2}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This category is closed. You can't change threads weights in it.", ) @patch_category_acl({"can_pin_threads": 2, "can_close_threads": 0}) def test_pin_thread_closed_no_permission(self): """api checks if thread is closed""" self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 2}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This thread is closed. You can't change its weight.", ) @patch_category_acl({"can_pin_threads": 2}) def test_unpin_thread(self): """api makes it possible to unpin thread""" self.thread.weight = 2 self.thread.save() thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 2) response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 0}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertEqual(response_json["weight"], 0) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 0) @patch_category_acl({"can_pin_threads": 1}) def test_pin_thread_no_permission(self): """api pin thread globally with no permission fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 2}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't pin threads globally in this category.", ) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 0) @patch_category_acl({"can_pin_threads": 1}) def test_unpin_thread_no_permission(self): """api unpin thread with no permission fails""" self.thread.weight = 2 self.thread.save() thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 2) response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 1}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't change globally pinned threads weights in this category.", ) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 2) class ThreadPinLocallyApiTests(ThreadPatchApiTestCase): @patch_category_acl({"can_pin_threads": 1}) def test_pin_thread(self): """api makes it possible to pin locally thread""" response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 1}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertEqual(response_json["weight"], 1) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 1) @patch_category_acl({"can_pin_threads": 1}) def test_unpin_thread(self): """api makes it possible to unpin thread""" self.thread.weight = 1 self.thread.save() thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 1) response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 0}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertEqual(response_json["weight"], 0) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 0) @patch_category_acl({"can_pin_threads": 0}) def test_pin_thread_no_permission(self): """api pin thread locally with no permission fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 1}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't change threads weights in this category.", ) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 0) @patch_category_acl({"can_pin_threads": 0}) def test_unpin_thread_no_permission(self): """api unpin thread with no permission fails""" self.thread.weight = 1 self.thread.save() thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 1) response = self.patch( self.api_link, [{"op": "replace", "path": "weight", "value": 0}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't change threads weights in this category.", ) thread_json = self.get_thread_json() self.assertEqual(thread_json["weight"], 1) class ThreadMoveApiTests(ThreadPatchApiTestCase): def setUp(self): super().setUp() Category(name="Other category", slug="other-category").insert_at( self.category, position="last-child", save=True ) self.dst_category = Category.objects.get(slug="other-category") @patch_other_category_acl({"can_start_threads": 2}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_no_top(self): """api moves thread to other category, sets no top category""" response = self.patch( self.api_link, [ {"op": "replace", "path": "category", "value": self.dst_category.pk}, {"op": "add", "path": "top-category", "value": self.dst_category.pk}, {"op": "replace", "path": "flatten-categories", "value": None}, ], ) self.assertEqual(response.status_code, 200) reponse_json = response.json() self.assertEqual(reponse_json["category"], self.dst_category.pk) thread_json = self.get_thread_json() self.assertEqual(thread_json["category"]["id"], self.dst_category.pk) @patch_other_category_acl({"can_start_threads": 2}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_with_top(self): """api moves thread to other category, sets top""" response = self.patch( self.api_link, [ {"op": "replace", "path": "category", "value": self.dst_category.pk}, { "op": "add", "path": "top-category", "value": Category.objects.root_category().pk, }, {"op": "replace", "path": "flatten-categories", "value": None}, ], ) self.assertEqual(response.status_code, 200) reponse_json = response.json() self.assertEqual(reponse_json["category"], self.dst_category.pk) thread_json = self.get_thread_json() self.assertEqual(thread_json["category"]["id"], self.dst_category.pk) @patch_other_category_acl({"can_start_threads": 2}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_reads(self): """api moves thread reads together with thread""" poststracker.save_read(self.user, self.thread.first_post) self.assertEqual(self.user.postread_set.count(), 1) self.user.postread_set.get(category=self.category) response = self.patch( self.api_link, [ {"op": "replace", "path": "category", "value": self.dst_category.pk}, {"op": "add", "path": "top-category", "value": self.dst_category.pk}, {"op": "replace", "path": "flatten-categories", "value": None}, ], ) self.assertEqual(response.status_code, 200) # thread read was moved to new category postreads = self.user.postread_set.filter(post__is_event=False).order_by("id") self.assertEqual(postreads.count(), 1) postreads.get(category=self.dst_category) @patch_other_category_acl({"can_start_threads": 2}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_subscriptions(self): """api moves thread subscriptions together with thread""" self.user.subscription_set.create( thread=self.thread, category=self.thread.category, last_read_on=self.thread.last_post_on, send_email=False, ) self.assertEqual(self.user.subscription_set.count(), 1) self.user.subscription_set.get(category=self.category) response = self.patch( self.api_link, [ {"op": "replace", "path": "category", "value": self.dst_category.pk}, {"op": "add", "path": "top-category", "value": self.dst_category.pk}, {"op": "replace", "path": "flatten-categories", "value": None}, ], ) self.assertEqual(response.status_code, 200) # thread read was moved to new category self.assertEqual(self.user.subscription_set.count(), 1) self.user.subscription_set.get(category=self.dst_category) @patch_category_acl({"can_move_threads": False}) def test_move_thread_no_permission(self): """api move thread to other category with no permission fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "category", "value": self.dst_category.pk}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't move threads in this category." ) thread_json = self.get_thread_json() self.assertEqual(thread_json["category"]["id"], self.category.pk) @patch_other_category_acl({"can_close_threads": False}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_closed_category_no_permission(self): """api move thread from closed category with no permission fails""" self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "category", "value": self.dst_category.pk}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This category is closed. You can't move it's threads.", ) @patch_other_category_acl({"can_close_threads": False}) @patch_category_acl({"can_move_threads": True}) def test_move_closed_thread_no_permission(self): """api move closed thread with no permission fails""" self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "category", "value": self.dst_category.pk}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This thread is closed. You can't move it." ) @patch_other_category_acl({"can_see": False}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_no_category_access(self): """api move thread to category with no access fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "category", "value": self.dst_category.pk}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual(response_json["detail"][0], "NOT FOUND") thread_json = self.get_thread_json() self.assertEqual(thread_json["category"]["id"], self.category.pk) @patch_other_category_acl({"can_browse": False}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_no_category_browse(self): """api move thread to category with no browsing access fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "category", "value": self.dst_category.pk}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], 'You don\'t have permission to browse "Other category" contents.', ) thread_json = self.get_thread_json() self.assertEqual(thread_json["category"]["id"], self.category.pk) @patch_other_category_acl({"can_start_threads": False}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_no_category_start_threads(self): """api move thread to category with no posting access fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "category", "value": self.dst_category.pk}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You don't have permission to start new threads in this category.", ) thread_json = self.get_thread_json() self.assertEqual(thread_json["category"]["id"], self.category.pk) @patch_other_category_acl({"can_start_threads": 2}) @patch_category_acl({"can_move_threads": True}) def test_move_thread_same_category(self): """api move thread to category it's already in fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "category", "value": self.thread.category_id}], ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't move thread to the category it's already in.", ) thread_json = self.get_thread_json() self.assertEqual(thread_json["category"]["id"], self.category.pk) def test_thread_flatten_categories(self): """api flatten thread categories""" response = self.patch( self.api_link, [{"op": "replace", "path": "flatten-categories", "value": None}], ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertEqual(response_json["category"], self.category.pk) class ThreadCloseApiTests(ThreadPatchApiTestCase): @patch_category_acl({"can_close_threads": True}) def test_close_thread(self): """api makes it possible to close thread""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-closed", "value": True}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertTrue(response_json["is_closed"]) thread_json = self.get_thread_json() self.assertTrue(thread_json["is_closed"]) @patch_category_acl({"can_close_threads": True}) def test_open_thread(self): """api makes it possible to open thread""" self.thread.is_closed = True self.thread.save() thread_json = self.get_thread_json() self.assertTrue(thread_json["is_closed"]) response = self.patch( self.api_link, [{"op": "replace", "path": "is-closed", "value": False}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertFalse(response_json["is_closed"]) thread_json = self.get_thread_json() self.assertFalse(thread_json["is_closed"]) @patch_category_acl({"can_close_threads": False}) def test_close_thread_no_permission(self): """api close thread with no permission fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-closed", "value": True}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You don't have permission to close this thread.", ) thread_json = self.get_thread_json() self.assertFalse(thread_json["is_closed"]) @patch_category_acl({"can_close_threads": False}) def test_open_thread_no_permission(self): """api open thread with no permission fails""" self.thread.is_closed = True self.thread.save() thread_json = self.get_thread_json() self.assertTrue(thread_json["is_closed"]) response = self.patch( self.api_link, [{"op": "replace", "path": "is-closed", "value": False}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You don't have permission to open this thread." ) thread_json = self.get_thread_json() self.assertTrue(thread_json["is_closed"]) class ThreadApproveApiTests(ThreadPatchApiTestCase): @patch_category_acl({"can_approve_content": True}) def test_approve_thread(self): """api makes it possible to approve thread""" self.thread.first_post.is_unapproved = True self.thread.first_post.save() self.thread.synchronize() self.thread.save() self.assertTrue(self.thread.is_unapproved) self.assertTrue(self.thread.has_unapproved_posts) response = self.patch( self.api_link, [{"op": "replace", "path": "is-unapproved", "value": False}] ) self.assertEqual(response.status_code, 200) response_json = response.json() self.assertFalse(response_json["is_unapproved"]) self.assertFalse(response_json["has_unapproved_posts"]) thread_json = self.get_thread_json() self.assertFalse(thread_json["is_unapproved"]) self.assertFalse(thread_json["has_unapproved_posts"]) thread = Thread.objects.get(pk=self.thread.pk) self.assertFalse(thread.is_unapproved) self.assertFalse(thread.has_unapproved_posts) @patch_category_acl({"can_approve_content": True, "can_close_threads": False}) def test_approve_thread_category_closed_no_permission(self): """api checks permission for approving threads in closed categories""" self.thread.first_post.is_unapproved = True self.thread.first_post.save() self.thread.synchronize() self.thread.save() self.assertTrue(self.thread.is_unapproved) self.assertTrue(self.thread.has_unapproved_posts) self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "is-unapproved", "value": False}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This category is closed. You can't approve threads in it.", ) @patch_category_acl({"can_approve_content": True, "can_close_threads": False}) def test_approve_thread_closed_no_permission(self): """api checks permission for approving posts in closed categories""" self.thread.first_post.is_unapproved = True self.thread.first_post.save() self.thread.synchronize() self.thread.save() self.assertTrue(self.thread.is_unapproved) self.assertTrue(self.thread.has_unapproved_posts) self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "is-unapproved", "value": False}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This thread is closed. You can't approve it." ) @patch_category_acl({"can_approve_content": True}) def test_unapprove_thread(self): """api returns permission error on approval removal""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-unapproved", "value": True}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "Content approval can't be reversed." ) class ThreadHideApiTests(ThreadPatchApiTestCase): @patch_category_acl({"can_hide_threads": True}) def test_hide_thread(self): """api makes it possible to hide thread""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": True}] ) self.assertEqual(response.status_code, 200) reponse_json = response.json() self.assertTrue(reponse_json["is_hidden"]) thread_json = self.get_thread_json() self.assertTrue(thread_json["is_hidden"]) @patch_category_acl({"can_hide_threads": False}) def test_hide_thread_no_permission(self): """api hide thread with no permission fails""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": True}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't hide threads in this category." ) thread_json = self.get_thread_json() self.assertFalse(thread_json["is_hidden"]) @patch_category_acl({"can_hide_threads": False, "can_hide_own_threads": True}) def test_hide_non_owned_thread(self): """api forbids non-moderator from hiding other users threads""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": True}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't hide other users theads in this category.", ) @patch_category_acl( {"can_hide_threads": False, "can_hide_own_threads": True, "thread_edit_time": 1} ) def test_hide_owned_thread_no_time(self): """api forbids non-moderator from hiding other users threads""" self.thread.started_on = timezone.now() - timedelta(minutes=5) self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": True}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "You can't hide threads that are older than 1 minute.", ) @patch_category_acl({"can_hide_threads": True, "can_close_threads": False}) def test_hide_closed_category_no_permission(self): """api test permission to hide thread in closed category""" self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": True}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This category is closed. You can't hide threads in it.", ) @patch_category_acl({"can_hide_threads": True, "can_close_threads": False}) def test_hide_closed_thread_no_permission(self): """api test permission to hide closed thread""" self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": True}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This thread is closed. You can't hide it." ) class ThreadUnhideApiTests(ThreadPatchApiTestCase): def setUp(self): super().setUp() self.thread.is_hidden = True self.thread.save() @patch_category_acl({"can_hide_threads": True}) def test_unhide_thread(self): """api makes it possible to unhide thread""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": False}] ) self.assertEqual(response.status_code, 200) reponse_json = response.json() self.assertFalse(reponse_json["is_hidden"]) thread_json = self.get_thread_json() self.assertFalse(thread_json["is_hidden"]) @patch_category_acl({"can_hide_threads": False}) def test_unhide_thread_no_permission(self): """api unhide thread with no permission fails as thread is invisible""" response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": True}] ) self.assertEqual(response.status_code, 404) @patch_category_acl({"can_hide_threads": True, "can_close_threads": False}) def test_unhide_closed_category_no_permission(self): """api test permission to unhide thread in closed category""" self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": False}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This category is closed. You can't reveal threads in it.", ) @patch_category_acl({"can_hide_threads": True, "can_close_threads": False}) def test_unhide_closed_thread_no_permission(self): """api test permission to unhide closed thread""" self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "is-hidden", "value": False}] ) self.assertEqual(response.status_code, 400) response_json = response.json() self.assertEqual( response_json["detail"][0], "This thread is closed. You can't reveal it." ) class ThreadSubscribeApiTests(ThreadPatchApiTestCase): def test_subscribe_thread(self): """api makes it possible to subscribe thread""" response = self.patch( self.api_link, [{"op": "replace", "path": "subscription", "value": "notify"}], ) self.assertEqual(response.status_code, 200) reponse_json = response.json() self.assertFalse(reponse_json["subscription"]) thread_json = self.get_thread_json() self.assertFalse(thread_json["subscription"]) subscription = self.user.subscription_set.get(thread=self.thread) self.assertFalse(subscription.send_email) def test_subscribe_thread_with_email(self): """api makes it possible to subscribe thread with emails""" response = self.patch( self.api_link, [{"op": "replace", "path": "subscription", "value": "email"}] ) self.assertEqual(response.status_code, 200) reponse_json = response.json() self.assertTrue(reponse_json["subscription"]) thread_json = self.get_thread_json() self.assertTrue(thread_json["subscription"]) subscription = self.user.subscription_set.get(thread=self.thread) self.assertTrue(subscription.send_email) def test_unsubscribe_thread(self): """api makes it possible to unsubscribe thread""" response = self.patch( self.api_link, [{"op": "replace", "path": "subscription", "value": "remove"}], ) self.assertEqual(response.status_code, 200) reponse_json = response.json() self.assertIsNone(reponse_json["subscription"]) thread_json = self.get_thread_json() self.assertIsNone(thread_json["subscription"]) self.assertEqual(self.user.subscription_set.count(), 0) def test_subscribe_as_guest(self): """api makes it impossible to subscribe thread""" self.logout_user() response = self.patch( self.api_link, [{"op": "replace", "path": "subscription", "value": "email"}] ) self.assertEqual(response.status_code, 403) def test_subscribe_nonexistant_thread(self): """api makes it impossible to subscribe nonexistant thread""" bad_api_link = self.api_link.replace( str(self.thread.pk), str(self.thread.pk + 9) ) response = self.patch( bad_api_link, [{"op": "replace", "path": "subscription", "value": "email"}] ) self.assertEqual(response.status_code, 404) class ThreadMarkBestAnswerApiTests(ThreadPatchApiTestCase): @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer(self): """api makes it possible to mark best answer""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["ok"], "best_answer": best_answer.id, "best_answer_is_protected": False, "best_answer_marked_on": response.json()["best_answer_marked_on"], "best_answer_marked_by": self.user.id, "best_answer_marked_by_name": self.user.username, "best_answer_marked_by_slug": self.user.slug, }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], best_answer.id) self.assertEqual(thread_json["best_answer_is_protected"], False) self.assertEqual( thread_json["best_answer_marked_on"], response.json()["best_answer_marked_on"], ) self.assertEqual(thread_json["best_answer_marked_by"], self.user.id) self.assertEqual(thread_json["best_answer_marked_by_name"], self.user.username) self.assertEqual(thread_json["best_answer_marked_by_slug"], self.user.slug) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_anonymous(self): """api validates that user is authenticated before marking best answer""" self.logout_user() best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 403) self.assertEqual( response.json(), {"detail": "This action is not available to guests."} ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 0}) def test_mark_best_answer_no_permission(self): """api validates permission to mark best answers""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ 'You don\'t have permission to mark best answers in the "First category" category.' ], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 1}) def test_mark_best_answer_not_thread_starter(self): """api validates permission to mark best answers in owned thread""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to mark best answer in this thread because you didn't " "start it." ], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) # passing scenario is possible self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl({"can_mark_best_answers": 2, "can_close_threads": False}) def test_mark_best_answer_category_closed_no_permission(self): """api validates permission to mark best answers in closed category""" best_answer = test.reply_thread(self.thread) self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to mark best answer in this thread because its " 'category "First category" is closed.' ], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2, "can_close_threads": True}) def test_mark_best_answer_category_closed(self): """api validates permission to mark best answers in closed category""" best_answer = test.reply_thread(self.thread) self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl({"can_mark_best_answers": 2, "can_close_threads": False}) def test_mark_best_answer_thread_closed_no_permission(self): """api validates permission to mark best answers in closed thread""" best_answer = test.reply_thread(self.thread) self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You can't mark best answer in this thread because it's closed and you don't have " "permission to open it." ], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2, "can_close_threads": True}) def test_mark_best_answer_thread_closed(self): """api validates permission to mark best answers in closed thread""" best_answer = test.reply_thread(self.thread) self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_invalid_post_id(self): """api validates that post id is int""" response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": "d7sd89a7d98sa"}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), {"id": self.thread.id, "detail": ["A valid integer is required."]}, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_post_not_found(self): """api validates that post exists""" response = self.patch( self.api_link, [ { "op": "replace", "path": "best-answer", "value": self.thread.last_post_id + 1, } ], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), {"id": self.thread.id, "detail": ["NOT FOUND"]} ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_post_invisible(self): """api validates post visibility to action author""" unapproved_post = test.reply_thread(self.thread, is_unapproved=True) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": unapproved_post.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), {"id": self.thread.id, "detail": ["NOT FOUND"]} ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_post_other_thread(self): """api validates post belongs to same thread""" other_thread = test.post_thread(self.category) response = self.patch( self.api_link, [ { "op": "replace", "path": "best-answer", "value": other_thread.first_post_id, } ], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), {"id": self.thread.id, "detail": ["NOT FOUND"]} ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_event_id(self): """api validates that post is not an event""" best_answer = test.reply_thread(self.thread) best_answer.is_event = True best_answer.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["Events can't be marked as best answers."], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_first_post(self): """api validates that post is not a first post in thread""" response = self.patch( self.api_link, [ { "op": "replace", "path": "best-answer", "value": self.thread.first_post_id, } ], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["First post in a thread can't be marked as best answer."], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_hidden_post(self): """api validates that post is not hidden""" best_answer = test.reply_thread(self.thread, is_hidden=True) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["Hidden posts can't be marked as best answers."], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2}) def test_mark_best_answer_unapproved_post(self): """api validates that post is not unapproved""" best_answer = test.reply_thread( self.thread, poster=self.user, is_unapproved=True ) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["Unapproved posts can't be marked as best answers."], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2, "can_protect_posts": False}) def test_mark_best_answer_protected_post_no_permission(self): """api respects post protection""" best_answer = test.reply_thread(self.thread, is_protected=True) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to mark this post as best answer because a moderator " "has protected it." ], }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) @patch_category_acl({"can_mark_best_answers": 2, "can_protect_posts": True}) def test_mark_best_answer_protected_post(self): """api respects post protection""" best_answer = test.reply_thread(self.thread, is_protected=True) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) class ThreadChangeBestAnswerApiTests(ThreadPatchApiTestCase): def setUp(self): super().setUp() self.best_answer = test.reply_thread(self.thread) self.thread.set_best_answer(self.user, self.best_answer) self.thread.save() @patch_category_acl({"can_mark_best_answers": 2, "can_change_marked_answers": 2}) def test_change_best_answer(self): """api makes it possible to change best answer""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["ok"], "best_answer": best_answer.id, "best_answer_is_protected": False, "best_answer_marked_on": response.json()["best_answer_marked_on"], "best_answer_marked_by": self.user.id, "best_answer_marked_by_name": self.user.username, "best_answer_marked_by_slug": self.user.slug, }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], best_answer.id) self.assertEqual(thread_json["best_answer_is_protected"], False) self.assertEqual( thread_json["best_answer_marked_on"], response.json()["best_answer_marked_on"], ) self.assertEqual(thread_json["best_answer_marked_by"], self.user.id) self.assertEqual(thread_json["best_answer_marked_by_name"], self.user.username) self.assertEqual(thread_json["best_answer_marked_by_slug"], self.user.slug) @patch_category_acl({"can_mark_best_answers": 2, "can_change_marked_answers": 2}) def test_change_best_answer_same_post(self): """api validates if new best answer is same as current one""" response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["This post is already marked as thread's best answer."], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl({"can_mark_best_answers": 0, "can_change_marked_answers": 2}) def test_change_best_answer_no_permission_to_mark(self): """api validates permission to mark best answers before allowing answer change""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ 'You don\'t have permission to mark best answers in the "First category" category.' ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl({"can_mark_best_answers": 2, "can_change_marked_answers": 0}) def test_change_best_answer_no_permission(self): """api validates permission to change best answers""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to change this thread's marked answer because it's " 'in the "First category" category.' ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl({"can_mark_best_answers": 2, "can_change_marked_answers": 1}) def test_change_best_answer_not_starter(self): """api validates permission to change best answers""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to change this thread's marked answer because you are " "not a thread starter." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) # passing scenario is possible self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl( { "can_mark_best_answers": 2, "can_change_marked_answers": 1, "best_answer_change_time": 5, } ) def test_change_best_answer_timelimit_out_of_time(self): """api validates permission for starter to change best answers within timelimit""" best_answer = test.reply_thread(self.thread) self.thread.best_answer_marked_on = timezone.now() - timedelta(minutes=6) self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to change best answer that was marked for more than " "5 minutes." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl( { "can_mark_best_answers": 2, "can_change_marked_answers": 1, "best_answer_change_time": 5, } ) def test_change_best_answer_timelimit(self): """api validates permission for starter to change best answers within timelimit""" best_answer = test.reply_thread(self.thread) self.thread.best_answer_marked_on = timezone.now() - timedelta(minutes=1) self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl( { "can_mark_best_answers": 2, "can_change_marked_answers": 2, "can_protect_posts": False, } ) def test_change_best_answer_protected_no_permission(self): """api validates permission to change protected best answers""" best_answer = test.reply_thread(self.thread) self.thread.best_answer_is_protected = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to change this thread's best answer because a " "moderator has protected it." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl( { "can_mark_best_answers": 2, "can_change_marked_answers": 2, "can_protect_posts": True, } ) def test_change_best_answer_protected(self): """api validates permission to change protected best answers""" best_answer = test.reply_thread(self.thread) self.thread.best_answer_is_protected = True self.thread.save() response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl({"can_mark_best_answers": 2, "can_change_marked_answers": 2}) def test_change_best_answer_post_validation(self): """api validates new post'""" best_answer = test.reply_thread(self.thread, is_hidden=True) response = self.patch( self.api_link, [{"op": "replace", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) class ThreadUnmarkBestAnswerApiTests(ThreadPatchApiTestCase): def setUp(self): super().setUp() self.best_answer = test.reply_thread(self.thread) self.thread.set_best_answer(self.user, self.best_answer) self.thread.save() @patch_category_acl({"can_mark_best_answers": 0, "can_change_marked_answers": 2}) def test_unmark_best_answer(self): """api makes it possible to unmark best answer""" response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 200) self.assertEqual( response.json(), { "id": self.thread.id, "detail": ["ok"], "best_answer": None, "best_answer_is_protected": False, "best_answer_marked_on": None, "best_answer_marked_by": None, "best_answer_marked_by_name": None, "best_answer_marked_by_slug": None, }, ) thread_json = self.get_thread_json() self.assertIsNone(thread_json["best_answer"]) self.assertFalse(thread_json["best_answer_is_protected"]) self.assertIsNone(thread_json["best_answer_marked_on"]) self.assertIsNone(thread_json["best_answer_marked_by"]) self.assertIsNone(thread_json["best_answer_marked_by_name"]) self.assertIsNone(thread_json["best_answer_marked_by_slug"]) @patch_category_acl({"can_mark_best_answers": 0, "can_change_marked_answers": 2}) def test_unmark_best_answer_invalid_post_id(self): """api validates that post id is int""" response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": "d7sd89a7d98sa"}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), {"id": self.thread.id, "detail": ["A valid integer is required."]}, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl({"can_mark_best_answers": 0, "can_change_marked_answers": 2}) def test_unmark_best_answer_post_not_found(self): """api validates that post to unmark exists""" response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id + 1}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), {"id": self.thread.id, "detail": ["NOT FOUND"]} ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl({"can_mark_best_answers": 0, "can_change_marked_answers": 2}) def test_unmark_best_answer_wrong_post(self): """api validates if post given to unmark is best answer""" best_answer = test.reply_thread(self.thread) response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "This post can't be unmarked because it's not currently marked as best answer." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl({"can_mark_best_answers": 0, "can_change_marked_answers": 0}) def test_unmark_best_answer_no_permission(self): """api validates if user has permission to unmark best answers""" response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ 'You don\'t have permission to unmark threads answers in the "First category" ' "category." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl({"can_mark_best_answers": 0, "can_change_marked_answers": 1}) def test_unmark_best_answer_not_starter(self): """api validates if starter has permission to unmark best answers""" response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to unmark this best answer because you are not a " "thread starter." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) # passing scenario is possible self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl( { "can_mark_best_answers": 0, "can_change_marked_answers": 1, "best_answer_change_time": 5, } ) def test_unmark_best_answer_timelimit(self): """api validates if starter has permission to unmark best answer within time limit""" self.thread.best_answer_marked_on = timezone.now() - timedelta(minutes=6) self.thread.starter = self.user self.thread.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to unmark best answer that was marked for more than " "5 minutes." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) # passing scenario is possible self.thread.best_answer_marked_on = timezone.now() - timedelta(minutes=2) self.thread.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl( { "can_mark_best_answers": 0, "can_change_marked_answers": 2, "can_close_threads": False, } ) def test_unmark_best_answer_closed_category_no_permission(self): """api validates if user has permission to unmark best answer in closed category""" self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to unmark this best answer because its category " '"First category" is closed.' ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl( { "can_mark_best_answers": 0, "can_change_marked_answers": 2, "can_close_threads": True, } ) def test_unmark_best_answer_closed_category(self): """api validates if user has permission to unmark best answer in closed category""" self.category.is_closed = True self.category.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl( { "can_mark_best_answers": 0, "can_change_marked_answers": 2, "can_close_threads": False, } ) def test_unmark_best_answer_closed_thread_no_permission(self): """api validates if user has permission to unmark best answer in closed thread""" self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You can't unmark this thread's best answer because it's closed and you don't " "have permission to open it." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl( { "can_mark_best_answers": 0, "can_change_marked_answers": 2, "can_close_threads": True, } ) def test_unmark_best_answer_closed_thread(self): """api validates if user has permission to unmark best answer in closed thread""" self.thread.is_closed = True self.thread.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 200) @patch_category_acl( { "can_mark_best_answers": 0, "can_change_marked_answers": 2, "can_protect_posts": 0, } ) def test_unmark_best_answer_protected_no_permission(self): """api validates permission to unmark protected best answers""" self.thread.best_answer_is_protected = True self.thread.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { "id": self.thread.id, "detail": [ "You don't have permission to unmark this thread's best answer because a " "moderator has protected it." ], }, ) thread_json = self.get_thread_json() self.assertEqual(thread_json["best_answer"], self.best_answer.id) @patch_category_acl( { "can_mark_best_answers": 0, "can_change_marked_answers": 2, "can_protect_posts": 1, } ) def test_unmark_best_answer_protected(self): """api validates permission to unmark protected best answers""" self.thread.best_answer_is_protected = True self.thread.save() response = self.patch( self.api_link, [{"op": "remove", "path": "best-answer", "value": self.best_answer.id}], ) self.assertEqual(response.status_code, 200)