test_moderation_views.py 9.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273
  1. from django.contrib.auth import get_user_model
  2. from django.core.urlresolvers import reverse
  3. from misago.acl.testutils import override_acl
  4. from misago.admin.testutils import AdminTestCase
  5. from misago.users.models import Ban
  6. class UserModerationTestCase(AdminTestCase):
  7. def setUp(self):
  8. super(UserModerationTestCase, self).setUp()
  9. self.test_user = get_user_model().objects.create_user(
  10. "Bob", "bob@bob.com", "Pass.123")
  11. self.link_kwargs = {'user_slug': 'bob', 'user_id': self.test_user.pk}
  12. class RenameUserTests(UserModerationTestCase):
  13. def test_no_rename_permission(self):
  14. """user with no permission fails to rename other user"""
  15. override_acl(self.test_admin, {
  16. 'misago.users.permissions.moderation': {
  17. 'can_rename_users': 0,
  18. },
  19. })
  20. response = self.client.get(
  21. reverse('misago:rename_user', kwargs=self.link_kwargs))
  22. self.assertEqual(response.status_code, 403)
  23. self.assertIn("You can't rename users.", response.content)
  24. def test_rename_user(self):
  25. """user with permission renames other user"""
  26. override_acl(self.test_admin, {
  27. 'misago.users.permissions.moderation': {
  28. 'can_rename_users': 1,
  29. }
  30. })
  31. response = self.client.get(
  32. reverse('misago:rename_user', kwargs=self.link_kwargs))
  33. self.assertEqual(response.status_code, 200)
  34. response = self.client.post(
  35. reverse('misago:rename_user', kwargs=self.link_kwargs),
  36. data={'new_username': 'LoremIpsum'})
  37. self.assertEqual(response.status_code, 302)
  38. response = self.client.post(reverse('misago:index'))
  39. self.assertEqual(response.status_code, 200)
  40. self.assertIn('Bob's username has been changed.', response.content)
  41. class ModerateAvatarTests(UserModerationTestCase):
  42. def test_no_rename_permission(self):
  43. """user with no permission fails to mod other user avatar"""
  44. override_acl(self.test_admin, {
  45. 'misago.users.permissions.moderation': {
  46. 'can_moderate_avatars': 0,
  47. },
  48. })
  49. response = self.client.get(
  50. reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
  51. self.assertEqual(response.status_code, 403)
  52. self.assertIn("You can't moderate avatars.", response.content)
  53. def test_rename_user(self):
  54. """user with permission moderates other user avatar"""
  55. override_acl(self.test_admin, {
  56. 'misago.users.permissions.moderation': {
  57. 'can_moderate_avatars': 1,
  58. }
  59. })
  60. response = self.client.get(
  61. reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
  62. self.assertEqual(response.status_code, 200)
  63. response = self.client.post(
  64. reverse('misago:moderate_avatar', kwargs=self.link_kwargs),
  65. data={
  66. 'is_avatar_locked': '1',
  67. 'avatar_lock_user_message': 'Test us3r message',
  68. 'avatar_lock_staff_message': 'Test st4ff message'
  69. })
  70. self.assertEqual(response.status_code, 302)
  71. User = get_user_model()
  72. updated_user = User.objects.get(id=self.test_user.pk)
  73. self.assertTrue(updated_user.is_avatar_locked)
  74. self.assertEqual(updated_user.avatar_lock_user_message,
  75. 'Test us3r message')
  76. self.assertEqual(updated_user.avatar_lock_staff_message,
  77. 'Test st4ff message')
  78. response = self.client.get(
  79. reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
  80. self.assertEqual(response.status_code, 200)
  81. self.assertIn('Test us3r message', response.content)
  82. self.assertIn('Test st4ff message', response.content)
  83. class ModerateSignatureTests(UserModerationTestCase):
  84. def test_no_rename_permission(self):
  85. """user with no permission fails to mod other user signature"""
  86. override_acl(self.test_admin, {
  87. 'misago.users.permissions.moderation': {
  88. 'can_moderate_signatures': 0,
  89. },
  90. })
  91. response = self.client.get(
  92. reverse('misago:moderate_signature', kwargs=self.link_kwargs))
  93. self.assertEqual(response.status_code, 403)
  94. self.assertIn("You can't moderate signatures.", response.content)
  95. def test_rename_user(self):
  96. """user with permission moderates other user signature"""
  97. override_acl(self.test_admin, {
  98. 'misago.users.permissions.moderation': {
  99. 'can_moderate_signatures': 1,
  100. }
  101. })
  102. response = self.client.get(
  103. reverse('misago:moderate_signature', kwargs=self.link_kwargs))
  104. self.assertEqual(response.status_code, 200)
  105. response = self.client.post(
  106. reverse('misago:moderate_signature', kwargs=self.link_kwargs),
  107. data={
  108. 'signature': 'kittens!',
  109. 'is_signature_locked': '1',
  110. 'signature_lock_user_message': 'Test us3r message',
  111. 'signature_lock_staff_message': 'Test st4ff message'
  112. })
  113. self.assertEqual(response.status_code, 302)
  114. User = get_user_model()
  115. updated_user = User.objects.get(id=self.test_user.pk)
  116. self.assertTrue(updated_user.is_signature_locked)
  117. self.assertEqual(updated_user.signature_parsed, '<p>kittens!</p>')
  118. self.assertEqual(updated_user.signature_lock_user_message,
  119. 'Test us3r message')
  120. self.assertEqual(updated_user.signature_lock_staff_message,
  121. 'Test st4ff message')
  122. response = self.client.get(
  123. reverse('misago:moderate_signature', kwargs=self.link_kwargs))
  124. self.assertEqual(response.status_code, 200)
  125. self.assertIn('Test us3r message', response.content)
  126. self.assertIn('Test st4ff message', response.content)
  127. class BanUserTests(UserModerationTestCase):
  128. def test_no_ban_permission(self):
  129. """user with no permission fails to ban other user"""
  130. override_acl(self.test_admin, {
  131. 'misago.users.permissions.moderation': {
  132. 'can_ban_users': 0,
  133. },
  134. })
  135. response = self.client.get(
  136. reverse('misago:ban_user', kwargs=self.link_kwargs))
  137. self.assertEqual(response.status_code, 403)
  138. self.assertIn("You can&#39;t ban users.", response.content)
  139. def test_ban_user(self):
  140. """user with permission bans other user"""
  141. override_acl(self.test_admin, {
  142. 'misago.users.permissions.moderation': {
  143. 'can_ban_users': 1,
  144. 'max_ban_length': 0,
  145. }
  146. })
  147. response = self.client.get(
  148. reverse('misago:ban_user', kwargs=self.link_kwargs))
  149. self.assertEqual(response.status_code, 200)
  150. response = self.client.post(
  151. reverse('misago:ban_user', kwargs=self.link_kwargs))
  152. self.assertEqual(response.status_code, 302)
  153. response = self.client.post(reverse('misago:index'))
  154. self.assertEqual(response.status_code, 200)
  155. self.assertIn('Bob has been banned.', response.content)
  156. Ban.objects.get(banned_value=self.test_user.username.lower())
  157. class LiftUserBanTests(UserModerationTestCase):
  158. def test_no_lift_ban_permission(self):
  159. """user with no permission fails to lift user ban"""
  160. override_acl(self.test_admin, {
  161. 'misago.users.permissions.moderation': {
  162. 'can_lift_bans': 0,
  163. 'max_lifted_ban_length': 0,
  164. },
  165. })
  166. Ban.objects.create(banned_value=self.test_user.username)
  167. response = self.client.post(
  168. reverse('misago:lift_user_ban', kwargs=self.link_kwargs))
  169. self.assertEqual(response.status_code, 403)
  170. self.assertIn("You can&#39;t lift bans.", response.content)
  171. def test_lift_user_ban(self):
  172. """user with permission lifts other user ban"""
  173. override_acl(self.test_admin, {
  174. 'misago.users.permissions.moderation': {
  175. 'can_lift_bans': 1,
  176. 'max_lifted_ban_length': 0,
  177. }
  178. })
  179. test_ban = Ban.objects.create(banned_value=self.test_user.username)
  180. response = self.client.post(
  181. reverse('misago:lift_user_ban', kwargs=self.link_kwargs))
  182. self.assertEqual(response.status_code, 302)
  183. response = self.client.post(reverse('misago:index'))
  184. self.assertEqual(response.status_code, 200)
  185. self.assertIn('ban has been lifted.', response.content)
  186. test_ban = Ban.objects.get(id=test_ban.pk)
  187. self.assertTrue(test_ban.is_expired)
  188. class DeleteUserTests(UserModerationTestCase):
  189. def test_no_delete_permission(self):
  190. """user with no permission fails to delete other user"""
  191. override_acl(self.test_admin, {
  192. 'misago.users.permissions.delete': {
  193. 'can_delete_users_newer_than': 0,
  194. 'can_delete_users_with_less_posts_than': 0,
  195. },
  196. })
  197. response = self.client.post(
  198. reverse('misago:delete_user', kwargs=self.link_kwargs))
  199. self.assertEqual(response.status_code, 403)
  200. self.assertIn("You can&#39;t delete users.", response.content)
  201. def test_delete_user(self):
  202. """user with permission deletes other user"""
  203. override_acl(self.test_admin, {
  204. 'misago.users.permissions.delete': {
  205. 'can_delete_users_newer_than': 5,
  206. 'can_delete_users_with_less_posts_than': 5,
  207. }
  208. })
  209. response = self.client.post(
  210. reverse('misago:delete_user', kwargs=self.link_kwargs))
  211. self.assertEqual(response.status_code, 302)
  212. response = self.client.post(reverse('misago:index'))
  213. self.assertEqual(response.status_code, 200)
  214. self.assertIn('Bob has been deleted', response.content)