from django.urls import reverse from misago.acl.testutils import override_acl from misago.categories.models import Category from misago.threads import testutils from misago.threads.models import Thread from misago.users.testutils import AuthenticatedUserTestCase class ReplyThreadTests(AuthenticatedUserTestCase): def setUp(self): super(ReplyThreadTests, self).setUp() self.category = Category.objects.get(slug='first-category') self.thread = testutils.post_thread(category=self.category) self.api_link = reverse( 'misago:api:thread-post-list', kwargs={ 'thread_pk': self.thread.pk, } ) def override_acl(self, extra_acl=None): new_acl = self.user.acl_cache new_acl['categories'][self.category.pk].update({ 'can_see': 1, 'can_browse': 1, 'can_start_threads': 0, 'can_reply_threads': 1, }) if extra_acl: new_acl['categories'][self.category.pk].update(extra_acl) override_acl(self.user, new_acl) def test_cant_reply_thread_as_guest(self): """user has to be authenticated to be able to post reply""" self.logout_user() response = self.client.post(self.api_link) self.assertEqual(response.status_code, 403) def test_thread_visibility(self): """thread's visibility is validated""" self.override_acl({'can_see': 0}) response = self.client.post(self.api_link) self.assertEqual(response.status_code, 404) self.override_acl({'can_browse': 0}) response = self.client.post(self.api_link) self.assertEqual(response.status_code, 404) self.override_acl({'can_see_all_threads': 0}) response = self.client.post(self.api_link) self.assertEqual(response.status_code, 404) def test_cant_reply_thread(self): """permission to reply thread is validated""" self.override_acl({'can_reply_threads': 0}) response = self.client.post(self.api_link) self.assertContains( response, "You can't reply to threads in this category.", status_code=403 ) def test_closed_category(self): """permssion to reply in closed category is validated""" self.override_acl({'can_close_threads': 0}) self.category.is_closed = True self.category.save() response = self.client.post(self.api_link) self.assertContains( response, "This category is closed. You can't reply to threads in it.", status_code=403 ) # allow to post in closed category self.override_acl({'can_close_threads': 1}) response = self.client.post(self.api_link) self.assertEqual(response.status_code, 400) def test_closed_thread(self): """permssion to reply in closed thread is validated""" self.override_acl({'can_close_threads': 0}) self.thread.is_closed = True self.thread.save() response = self.client.post(self.api_link) self.assertContains( response, "You can't reply to closed threads in this category.", status_code=403 ) # allow to post in closed thread self.override_acl({'can_close_threads': 1}) response = self.client.post(self.api_link) self.assertEqual(response.status_code, 400) def test_empty_data(self): """no data sent handling has no showstoppers""" self.override_acl() response = self.client.post(self.api_link, data={}) self.assertContains(response, "You have to enter a message.", status_code=400) def test_invalid_data(self): """api errors for invalid request data""" self.override_acl() response = self.client.post( self.api_link, 'false', content_type="application/json", ) self.assertContains(response, "Invalid data.", status_code=400) def test_post_is_validated(self): """post is validated""" self.override_acl() response = self.client.post( self.api_link, data={ 'post': "a", } ) self.assertEqual(response.status_code, 400) self.assertEqual( response.json(), { 'post': ["Posted message should be at least 5 characters long (it has 1)."], } ) def test_can_reply_thread(self): """endpoint creates new reply""" self.override_acl() response = self.client.post( self.api_link, data={ 'post': "This is test response!", } ) self.assertEqual(response.status_code, 200) thread = Thread.objects.get(pk=self.thread.pk) self.override_acl() response = self.client.get(self.thread.get_absolute_url()) self.assertContains(response, "

This is test response!

") # api increased user's posts counts self.reload_user() self.assertEqual(self.user.threads, 0) self.assertEqual(self.user.posts, 1) self.assertEqual(self.user.audittrail_set.count(), 1) post = self.user.post_set.all()[:1][0] self.assertEqual(post.category_id, self.category.pk) self.assertEqual(post.original, "This is test response!") self.assertEqual(post.poster_id, self.user.id) self.assertEqual(post.poster_name, self.user.username) self.assertEqual(thread.last_post_id, post.id) self.assertEqual(thread.last_poster_id, self.user.id) self.assertEqual(thread.last_poster_name, self.user.username) self.assertEqual(thread.last_poster_slug, self.user.slug) category = Category.objects.get(pk=self.category.pk) self.assertEqual(category.last_thread_id, thread.id) self.assertEqual(category.last_thread_title, thread.title) self.assertEqual(category.last_thread_slug, thread.slug) self.assertEqual(category.last_poster_id, self.user.id) self.assertEqual(category.last_poster_name, self.user.username) self.assertEqual(category.last_poster_slug, self.user.slug) def test_post_unicode(self): """unicode characters can be posted""" self.override_acl() response = self.client.post( self.api_link, data={ 'post': "Chrzążczyżewoszyce, powiat Łękółody.", } ) self.assertEqual(response.status_code, 200) def test_category_moderation_queue(self): """reply thread in category that requires approval""" self.category.require_replies_approval = True self.category.save() response = self.client.post( self.api_link, data={ 'post': "Lorem ipsum dolor met!", } ) self.assertEqual(response.status_code, 200) thread = Thread.objects.get(pk=self.thread.pk) self.assertFalse(thread.is_unapproved) self.assertTrue(thread.has_unapproved_posts) self.assertEqual(thread.replies, self.thread.replies) post = self.user.post_set.all()[:1][0] self.assertTrue(post.is_unapproved) category = Category.objects.get(slug='first-category') self.assertEqual(category.threads, self.category.threads) self.assertEqual(category.posts, self.category.posts) def test_category_moderation_queue_bypass(self): """bypass moderation queue due to user's acl""" override_acl(self.user, {'can_approve_content': 1}) self.category.require_replies_approval = True self.category.save() response = self.client.post( self.api_link, data={ 'post': "Lorem ipsum dolor met!", } ) self.assertEqual(response.status_code, 200) thread = Thread.objects.get(pk=self.thread.pk) self.assertFalse(thread.is_unapproved) self.assertFalse(thread.has_unapproved_posts) self.assertEqual(thread.replies, self.thread.replies + 1) post = self.user.post_set.all()[:1][0] self.assertFalse(post.is_unapproved) category = Category.objects.get(slug='first-category') self.assertEqual(category.threads, self.category.threads) self.assertEqual(category.posts, self.category.posts + 1) def test_user_moderation_queue(self): """reply thread by user that requires approval""" self.override_acl({'require_replies_approval': 1}) response = self.client.post( self.api_link, data={ 'post': "Lorem ipsum dolor met!", } ) self.assertEqual(response.status_code, 200) thread = Thread.objects.get(pk=self.thread.pk) self.assertFalse(thread.is_unapproved) self.assertTrue(thread.has_unapproved_posts) self.assertEqual(thread.replies, self.thread.replies) post = self.user.post_set.all()[:1][0] self.assertTrue(post.is_unapproved) category = Category.objects.get(slug='first-category') self.assertEqual(category.threads, self.category.threads) self.assertEqual(category.posts, self.category.posts) def test_user_moderation_queue_bypass(self): """bypass moderation queue due to user's acl""" override_acl(self.user, {'can_approve_content': 1}) self.override_acl({'require_replies_approval': 1}) response = self.client.post( self.api_link, data={ 'post': "Lorem ipsum dolor met!", } ) self.assertEqual(response.status_code, 200) thread = Thread.objects.get(pk=self.thread.pk) self.assertFalse(thread.is_unapproved) self.assertFalse(thread.has_unapproved_posts) self.assertEqual(thread.replies, self.thread.replies + 1) post = self.user.post_set.all()[:1][0] self.assertFalse(post.is_unapproved) category = Category.objects.get(slug='first-category') self.assertEqual(category.threads, self.category.threads) self.assertEqual(category.posts, self.category.posts + 1) def test_omit_other_moderation_queues(self): """other queues are omitted""" self.category.require_threads_approval = True self.category.require_edits_approval = True self.category.save() self.override_acl({ 'require_threads_approval': 1, 'require_edits_approval': 1, }) response = self.client.post( self.api_link, data={ 'post': "Lorem ipsum dolor met!", } ) self.assertEqual(response.status_code, 200) thread = Thread.objects.get(pk=self.thread.pk) self.assertFalse(thread.is_unapproved) self.assertFalse(thread.has_unapproved_posts) self.assertEqual(thread.replies, self.thread.replies + 1) post = self.user.post_set.all()[:1][0] self.assertFalse(post.is_unapproved) category = Category.objects.get(slug='first-category') self.assertEqual(category.threads, self.category.threads) self.assertEqual(category.posts, self.category.posts + 1)