test_thread_start_api.py 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380
  1. # -*- coding: utf-8 -*-
  2. from __future__ import unicode_literals
  3. from django.urls import reverse
  4. from misago.acl.testutils import override_acl
  5. from misago.categories.models import Category
  6. from misago.users.testutils import AuthenticatedUserTestCase
  7. class StartThreadTests(AuthenticatedUserTestCase):
  8. def setUp(self):
  9. super(StartThreadTests, self).setUp()
  10. self.category = Category.objects.get(slug='first-category')
  11. self.api_link = reverse('misago:api:thread-list')
  12. def override_acl(self, extra_acl=None):
  13. new_acl = self.user.acl_cache
  14. new_acl['categories'][self.category.pk].update({
  15. 'can_see': 1,
  16. 'can_browse': 1,
  17. 'can_start_threads': 1,
  18. 'can_pin_threads': 0,
  19. 'can_close_threads': 0,
  20. 'can_hide_threads': 0,
  21. 'can_hide_own_threads': 0
  22. })
  23. if extra_acl:
  24. new_acl['categories'][self.category.pk].update(extra_acl)
  25. if 'can_see' in extra_acl and not extra_acl['can_see']:
  26. new_acl['visible_categories'].remove(self.category.pk)
  27. new_acl['browseable_categories'].remove(self.category.pk)
  28. if 'can_browse' in extra_acl and not extra_acl['can_browse']:
  29. new_acl['browseable_categories'].remove(self.category.pk)
  30. override_acl(self.user, new_acl)
  31. def test_cant_start_thread_as_guest(self):
  32. """user has to be authenticated to be able to post thread"""
  33. self.logout_user()
  34. response = self.client.post(self.api_link)
  35. self.assertEqual(response.status_code, 403)
  36. def test_cant_see(self):
  37. """has no permission to see selected category"""
  38. self.override_acl({'can_see': 0})
  39. response = self.client.post(self.api_link, {'category': self.category.pk})
  40. self.assertContains(response, "Selected category is invalid.", status_code=400)
  41. def test_cant_browse(self):
  42. """has no permission to browse selected category"""
  43. self.override_acl({'can_browse': 0})
  44. response = self.client.post(self.api_link, {'category': self.category.pk})
  45. self.assertContains(response, "Selected category is invalid.", status_code=400)
  46. def test_cant_start_thread(self):
  47. """permission to start thread in category is validated"""
  48. self.override_acl({'can_start_threads': 0})
  49. response = self.client.post(self.api_link, {'category': self.category.pk})
  50. self.assertContains(
  51. response, "You don't have permission to start new threads", status_code=400
  52. )
  53. def test_cant_start_thread_in_locked_category(self):
  54. """can't post in closed category"""
  55. self.category.is_closed = True
  56. self.category.save()
  57. self.override_acl({'can_close_threads': 0})
  58. response = self.client.post(self.api_link, {'category': self.category.pk})
  59. self.assertContains(response, "This category is closed.", status_code=400)
  60. def test_cant_start_thread_in_invalid_category(self):
  61. """can't post in invalid category"""
  62. self.category.is_closed = True
  63. self.category.save()
  64. self.override_acl({'can_close_threads': 0})
  65. response = self.client.post(self.api_link, {'category': self.category.pk * 100000})
  66. self.assertContains(response, "Selected category doesn't exist", status_code=400)
  67. def test_empty_data(self):
  68. """no data sent handling has no showstoppers"""
  69. self.override_acl()
  70. response = self.client.post(self.api_link, data={})
  71. self.assertEqual(response.status_code, 400)
  72. self.assertEqual(
  73. response.json(), {
  74. 'category': ["You have to select category to post thread in."],
  75. 'title': ["You have to enter thread title."],
  76. 'post': ["You have to enter a message."]
  77. }
  78. )
  79. def test_title_is_validated(self):
  80. """title is validated"""
  81. self.override_acl()
  82. response = self.client.post(
  83. self.api_link,
  84. data={
  85. 'category': self.category.pk,
  86. 'title': "------",
  87. 'post': "Lorem ipsum dolor met, sit amet elit!",
  88. }
  89. )
  90. self.assertEqual(response.status_code, 400)
  91. self.assertEqual(
  92. response.json(), {'title': ["Thread title should contain alpha-numeric characters."]}
  93. )
  94. def test_post_is_validated(self):
  95. """post is validated"""
  96. self.override_acl()
  97. response = self.client.post(
  98. self.api_link,
  99. data={
  100. 'category': self.category.pk,
  101. 'title': "Lorem ipsum dolor met",
  102. 'post': "a",
  103. }
  104. )
  105. self.assertEqual(response.status_code, 400)
  106. self.assertEqual(
  107. response.json(),
  108. {'post': ["Posted message should be at least 5 characters long (it has 1)."]}
  109. )
  110. def test_can_start_thread(self):
  111. """endpoint creates new thread"""
  112. self.override_acl()
  113. response = self.client.post(
  114. self.api_link,
  115. data={
  116. 'category': self.category.pk,
  117. 'title': "Hello, I am test thread!",
  118. 'post': "Lorem ipsum dolor met!"
  119. }
  120. )
  121. self.assertEqual(response.status_code, 200)
  122. thread = self.user.thread_set.all()[:1][0]
  123. response_json = response.json()
  124. self.assertEqual(response_json['url'], thread.get_absolute_url())
  125. self.override_acl()
  126. response = self.client.get(thread.get_absolute_url())
  127. self.assertContains(response, self.category.name)
  128. self.assertContains(response, thread.title)
  129. self.assertContains(response, "<p>Lorem ipsum dolor met!</p>")
  130. # api increased user's threads and posts counts
  131. self.reload_user()
  132. self.assertEqual(self.user.threads, 1)
  133. self.assertEqual(self.user.posts, 1)
  134. self.assertEqual(thread.category_id, self.category.pk)
  135. self.assertEqual(thread.title, "Hello, I am test thread!")
  136. self.assertEqual(thread.starter_id, self.user.id)
  137. self.assertEqual(thread.starter_name, self.user.username)
  138. self.assertEqual(thread.starter_slug, self.user.slug)
  139. self.assertEqual(thread.last_poster_id, self.user.id)
  140. self.assertEqual(thread.last_poster_name, self.user.username)
  141. self.assertEqual(thread.last_poster_slug, self.user.slug)
  142. post = self.user.post_set.all()[:1][0]
  143. self.assertEqual(post.category_id, self.category.pk)
  144. self.assertEqual(post.original, 'Lorem ipsum dolor met!')
  145. self.assertEqual(post.poster_id, self.user.id)
  146. self.assertEqual(post.poster_name, self.user.username)
  147. category = Category.objects.get(pk=self.category.pk)
  148. self.assertEqual(category.threads, 1)
  149. self.assertEqual(category.posts, 1)
  150. self.assertEqual(category.last_thread_id, thread.id)
  151. self.assertEqual(category.last_thread_title, thread.title)
  152. self.assertEqual(category.last_thread_slug, thread.slug)
  153. self.assertEqual(category.last_poster_id, self.user.id)
  154. self.assertEqual(category.last_poster_name, self.user.username)
  155. self.assertEqual(category.last_poster_slug, self.user.slug)
  156. def test_start_closed_thread_no_permission(self):
  157. """permission is checked before thread is closed"""
  158. self.override_acl({'can_close_threads': 0})
  159. response = self.client.post(
  160. self.api_link,
  161. data={
  162. 'category': self.category.pk,
  163. 'title': "Hello, I am test thread!",
  164. 'post': "Lorem ipsum dolor met!",
  165. 'close': True
  166. }
  167. )
  168. self.assertEqual(response.status_code, 200)
  169. thread = self.user.thread_set.all()[:1][0]
  170. self.assertFalse(thread.is_closed)
  171. def test_start_closed_thread(self):
  172. """can post closed thread"""
  173. self.override_acl({'can_close_threads': 1})
  174. response = self.client.post(
  175. self.api_link,
  176. data={
  177. 'category': self.category.pk,
  178. 'title': "Hello, I am test thread!",
  179. 'post': "Lorem ipsum dolor met!",
  180. 'close': True
  181. }
  182. )
  183. self.assertEqual(response.status_code, 200)
  184. thread = self.user.thread_set.all()[:1][0]
  185. self.assertTrue(thread.is_closed)
  186. def test_start_unpinned_thread(self):
  187. """can post unpinned thread"""
  188. self.override_acl({'can_pin_threads': 1})
  189. response = self.client.post(
  190. self.api_link,
  191. data={
  192. 'category': self.category.pk,
  193. 'title': "Hello, I am test thread!",
  194. 'post': "Lorem ipsum dolor met!",
  195. 'pin': 0
  196. }
  197. )
  198. self.assertEqual(response.status_code, 200)
  199. thread = self.user.thread_set.all()[:1][0]
  200. self.assertEqual(thread.weight, 0)
  201. def test_start_locally_pinned_thread(self):
  202. """can post locally pinned thread"""
  203. self.override_acl({'can_pin_threads': 1})
  204. response = self.client.post(
  205. self.api_link,
  206. data={
  207. 'category': self.category.pk,
  208. 'title': "Hello, I am test thread!",
  209. 'post': "Lorem ipsum dolor met!",
  210. 'pin': 1
  211. }
  212. )
  213. self.assertEqual(response.status_code, 200)
  214. thread = self.user.thread_set.all()[:1][0]
  215. self.assertEqual(thread.weight, 1)
  216. def test_start_globally_pinned_thread(self):
  217. """can post globally pinned thread"""
  218. self.override_acl({'can_pin_threads': 2})
  219. response = self.client.post(
  220. self.api_link,
  221. data={
  222. 'category': self.category.pk,
  223. 'title': "Hello, I am test thread!",
  224. 'post': "Lorem ipsum dolor met!",
  225. 'pin': 2
  226. }
  227. )
  228. self.assertEqual(response.status_code, 200)
  229. thread = self.user.thread_set.all()[:1][0]
  230. self.assertEqual(thread.weight, 2)
  231. def test_start_globally_pinned_thread_no_permission(self):
  232. """cant post globally pinned thread without permission"""
  233. self.override_acl({'can_pin_threads': 1})
  234. response = self.client.post(
  235. self.api_link,
  236. data={
  237. 'category': self.category.pk,
  238. 'title': "Hello, I am test thread!",
  239. 'post': "Lorem ipsum dolor met!",
  240. 'pin': 2
  241. }
  242. )
  243. self.assertEqual(response.status_code, 200)
  244. thread = self.user.thread_set.all()[:1][0]
  245. self.assertEqual(thread.weight, 0)
  246. def test_start_locally_pinned_thread_no_permission(self):
  247. """cant post locally pinned thread without permission"""
  248. self.override_acl({'can_pin_threads': 0})
  249. response = self.client.post(
  250. self.api_link,
  251. data={
  252. 'category': self.category.pk,
  253. 'title': "Hello, I am test thread!",
  254. 'post': "Lorem ipsum dolor met!",
  255. 'pin': 1
  256. }
  257. )
  258. self.assertEqual(response.status_code, 200)
  259. thread = self.user.thread_set.all()[:1][0]
  260. self.assertEqual(thread.weight, 0)
  261. def test_start_hidden_thread(self):
  262. """can post hidden thread"""
  263. self.override_acl({'can_hide_threads': 1})
  264. response = self.client.post(
  265. self.api_link,
  266. data={
  267. 'category': self.category.pk,
  268. 'title': "Hello, I am test thread!",
  269. 'post': "Lorem ipsum dolor met!",
  270. 'hide': 1
  271. }
  272. )
  273. self.assertEqual(response.status_code, 200)
  274. thread = self.user.thread_set.all()[:1][0]
  275. self.assertTrue(thread.is_hidden)
  276. category = Category.objects.get(pk=self.category.pk)
  277. self.assertNotEqual(category.last_thread_id, thread.id)
  278. def test_start_hidden_thread_no_permission(self):
  279. """cant post hidden thread without permission"""
  280. self.override_acl({'can_hide_threads': 0})
  281. response = self.client.post(
  282. self.api_link,
  283. data={
  284. 'category': self.category.pk,
  285. 'title': "Hello, I am test thread!",
  286. 'post': "Lorem ipsum dolor met!",
  287. 'hide': 1
  288. }
  289. )
  290. self.assertEqual(response.status_code, 200)
  291. thread = self.user.thread_set.all()[:1][0]
  292. self.assertFalse(thread.is_hidden)
  293. def test_post_unicode(self):
  294. """unicode characters can be posted"""
  295. self.override_acl()
  296. response = self.client.post(
  297. self.api_link,
  298. data={
  299. 'category': self.category.pk,
  300. 'title': "Brzęczyżczykiewicz",
  301. 'post': "Chrzążczyżewoszyce, powiat Łękółody."
  302. }
  303. )
  304. self.assertEqual(response.status_code, 200)