from misago.acl.test import patch_user_acl from misago.users.testutils import AuthenticatedUserTestCase class UsernameChangesApiTests(AuthenticatedUserTestCase): def setUp(self): super().setUp() self.link = "/api/username-changes/" @patch_user_acl({"can_see_users_name_history": False}) def test_user_can_always_see_his_name_changes(self): """list returns own username changes""" self.user.set_username("NewUsername", self.user) response = self.client.get("%s?user=%s" % (self.link, self.user.pk)) self.assertEqual(response.status_code, 200) self.assertContains(response, self.user.username) @patch_user_acl({"can_see_users_name_history": True}) def test_list_handles_invalid_filter(self): """list raises 404 for invalid filter""" self.user.set_username("NewUsername", self.user) response = self.client.get("%s?user=abcd" % self.link) self.assertEqual(response.status_code, 404) @patch_user_acl({"can_see_users_name_history": True}) def test_list_handles_nonexisting_user(self): """list raises 404 for invalid user id""" self.user.set_username("NewUsername", self.user) response = self.client.get("%s?user=142141" % self.link) self.assertEqual(response.status_code, 404) @patch_user_acl({"can_see_users_name_history": False}) def test_list_handles_search(self): """list returns found username changes""" self.user.set_username("NewUsername", self.user) response = self.client.get("%s?user=%s&search=new" % (self.link, self.user.pk)) self.assertEqual(response.status_code, 200) self.assertContains(response, self.user.username) response = self.client.get( "%s?user=%s&search=usernew" % (self.link, self.user.pk) ) self.assertEqual(response.status_code, 200) self.assertEqual(response.json()["count"], 0) @patch_user_acl({"can_see_users_name_history": False}) def test_list_denies_permission(self): """list denies permission for other user (or all) if no access""" response = self.client.get("%s?user=%s" % (self.link, self.user.pk + 1)) self.assertEqual(response.status_code, 403) self.assertEqual( response.json(), {"detail": "You don't have permission to see other users name history."}, ) response = self.client.get(self.link) self.assertEqual(response.status_code, 403) self.assertEqual( response.json(), {"detail": "You don't have permission to see other users name history."}, )