123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687 |
- import time
- from django.core.urlresolvers import reverse
- from .. import testutils
- from ..models import Post, Thread
- from .test_threads_api import ThreadsApiTestCase
- class PostDeleteApiTests(ThreadsApiTestCase):
- def setUp(self):
- super(PostDeleteApiTests, self).setUp()
- self.post = testutils.reply_thread(self.thread, poster=self.user)
- self.api_link = reverse('misago:api:thread-post-detail', kwargs={
- 'thread_pk': self.thread.pk,
- 'pk': self.post.pk
- })
- def refresh_thread(self):
- self.thread = Thread.objects.get(pk=self.thread.pk)
- def test_delete_anonymous(self):
- """api validates if deleting user is authenticated"""
- self.logout_user()
- response = self.client.delete(self.api_link)
- self.assertContains(response, "This action is not available to guests.", status_code=403)
- def test_no_permission(self):
- """api validates permission to delete post"""
- self.override_acl({
- 'can_hide_own_posts': 1,
- 'can_hide_posts': 1
- })
- response = self.client.delete(self.api_link)
- self.assertContains(response, "You can't delete posts in this category.", status_code=403)
- def test_delete_first_post(self):
- """api disallows first post's deletion"""
- self.override_acl({
- 'can_hide_own_posts': 2,
- 'can_hide_posts': 2
- })
- api_link = reverse('misago:api:thread-post-detail', kwargs={
- 'thread_pk': self.thread.pk,
- 'pk': self.thread.first_post_id
- })
- response = self.client.delete(api_link)
- self.assertContains(response, "You can't delete thread's first post.", status_code=403)
- def test_delete_owned_post(self):
- """api deletes owned thread post"""
- self.override_acl({
- 'post_edit_time': 0,
- 'can_hide_own_posts': 2,
- 'can_hide_posts': 0
- })
- response = self.client.delete(self.api_link)
- self.assertEqual(response.status_code, 200)
- self.refresh_thread()
- self.assertNotEqual(self.thread.last_post_id, self.post.pk)
- with self.assertRaises(Post.DoesNotExist):
- self.thread.post_set.get(pk=self.post.pk)
- def test_delete_post(self):
- """api deletes thread post"""
- self.override_acl({
- 'can_hide_own_posts': 0,
- 'can_hide_posts': 2
- })
- response = self.client.delete(self.api_link)
- self.assertEqual(response.status_code, 200)
- self.refresh_thread()
- self.assertNotEqual(self.thread.last_post_id, self.post.pk)
- with self.assertRaises(Post.DoesNotExist):
- self.thread.post_set.get(pk=self.post.pk)
|