test_threads_posts_api.py 2.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687
  1. import time
  2. from django.core.urlresolvers import reverse
  3. from .. import testutils
  4. from ..models import Post, Thread
  5. from .test_threads_api import ThreadsApiTestCase
  6. class PostDeleteApiTests(ThreadsApiTestCase):
  7. def setUp(self):
  8. super(PostDeleteApiTests, self).setUp()
  9. self.post = testutils.reply_thread(self.thread, poster=self.user)
  10. self.api_link = reverse('misago:api:thread-post-detail', kwargs={
  11. 'thread_pk': self.thread.pk,
  12. 'pk': self.post.pk
  13. })
  14. def refresh_thread(self):
  15. self.thread = Thread.objects.get(pk=self.thread.pk)
  16. def test_delete_anonymous(self):
  17. """api validates if deleting user is authenticated"""
  18. self.logout_user()
  19. response = self.client.delete(self.api_link)
  20. self.assertContains(response, "This action is not available to guests.", status_code=403)
  21. def test_no_permission(self):
  22. """api validates permission to delete post"""
  23. self.override_acl({
  24. 'can_hide_own_posts': 1,
  25. 'can_hide_posts': 1
  26. })
  27. response = self.client.delete(self.api_link)
  28. self.assertContains(response, "You can't delete posts in this category.", status_code=403)
  29. def test_delete_first_post(self):
  30. """api disallows first post's deletion"""
  31. self.override_acl({
  32. 'can_hide_own_posts': 2,
  33. 'can_hide_posts': 2
  34. })
  35. api_link = reverse('misago:api:thread-post-detail', kwargs={
  36. 'thread_pk': self.thread.pk,
  37. 'pk': self.thread.first_post_id
  38. })
  39. response = self.client.delete(api_link)
  40. self.assertContains(response, "You can't delete thread's first post.", status_code=403)
  41. def test_delete_owned_post(self):
  42. """api deletes owned thread post"""
  43. self.override_acl({
  44. 'post_edit_time': 0,
  45. 'can_hide_own_posts': 2,
  46. 'can_hide_posts': 0
  47. })
  48. response = self.client.delete(self.api_link)
  49. self.assertEqual(response.status_code, 200)
  50. self.refresh_thread()
  51. self.assertNotEqual(self.thread.last_post_id, self.post.pk)
  52. with self.assertRaises(Post.DoesNotExist):
  53. self.thread.post_set.get(pk=self.post.pk)
  54. def test_delete_post(self):
  55. """api deletes thread post"""
  56. self.override_acl({
  57. 'can_hide_own_posts': 0,
  58. 'can_hide_posts': 2
  59. })
  60. response = self.client.delete(self.api_link)
  61. self.assertEqual(response.status_code, 200)
  62. self.refresh_thread()
  63. self.assertNotEqual(self.thread.last_post_id, self.post.pk)
  64. with self.assertRaises(Post.DoesNotExist):
  65. self.thread.post_set.get(pk=self.post.pk)