123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267 |
- from django.contrib.auth import get_user_model
- from django.core.urlresolvers import reverse
- from misago.acl.testutils import override_acl
- from misago.users.models import Ban
- from misago.users.testutils import AuthenticatedUserTestCase
- class UserModerationTestCase(AuthenticatedUserTestCase):
- def setUp(self):
- super(UserModerationTestCase, self).setUp()
- self.test_user = get_user_model().objects.create_user(
- "Bob", "bob@bob.com", "Pass.123")
- self.link_kwargs = {'user_slug': 'bob', 'user_id': self.test_user.pk}
- class RenameUserTests(UserModerationTestCase):
- def allow_rename(self):
- override_acl(self.user, {
- 'can_rename_users': 1,
- })
- def test_no_rename_permission(self):
- """user with no permission fails to rename other user"""
- override_acl(self.user, {
- 'can_rename_users': 0,
- })
- response = self.client.get(
- reverse('misago:rename_user', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 403)
- self.assertIn("You can't rename users.", response.content)
- def test_rename_user(self):
- """user with permission renames other user"""
- self.allow_rename()
- response = self.client.get(
- reverse('misago:rename_user', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 200)
- self.allow_rename()
- response = self.client.post(
- reverse('misago:rename_user', kwargs=self.link_kwargs),
- data={'new_username': 'LoremIpsum'})
- self.assertEqual(response.status_code, 302)
- self.allow_rename()
- response = self.client.post(reverse('misago:index'))
- self.assertEqual(response.status_code, 200)
- self.assertIn('Bob's username has been changed.', response.content)
- class ModerateAvatarTests(UserModerationTestCase):
- def allow_avatar_mod(self):
- override_acl(self.user, {
- 'can_moderate_avatars': 1,
- })
- def test_no_avatar_mod_permission(self):
- """user with no permission fails to mod other user avatar"""
- override_acl(self.user, {
- 'can_moderate_avatars': 0,
- })
- response = self.client.get(
- reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 403)
- self.assertIn("You can't moderate avatars.", response.content)
- def test_mod_avatar(self):
- """user with permission moderates other user avatar"""
- self.allow_avatar_mod()
- response = self.client.get(
- reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 200)
- self.allow_avatar_mod()
- response = self.client.post(
- reverse('misago:moderate_avatar', kwargs=self.link_kwargs),
- data={
- 'is_avatar_locked': '1',
- 'avatar_lock_user_message': 'Test us3r message',
- 'avatar_lock_staff_message': 'Test st4ff message'
- })
- self.assertEqual(response.status_code, 302)
- User = get_user_model()
- updated_user = User.objects.get(id=self.test_user.pk)
- self.assertTrue(updated_user.is_avatar_locked)
- self.assertEqual(updated_user.avatar_lock_user_message,
- 'Test us3r message')
- self.assertEqual(updated_user.avatar_lock_staff_message,
- 'Test st4ff message')
- self.allow_avatar_mod()
- response = self.client.get(
- reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 200)
- self.assertIn('Test us3r message', response.content)
- self.assertIn('Test st4ff message', response.content)
- class ModerateSignatureTests(UserModerationTestCase):
- def allow_signature_mod(self):
- override_acl(self.user, {
- 'can_moderate_signatures': 1,
- })
- def test_no_signature_mod_permission(self):
- """user with no permission fails to mod other user signature"""
- override_acl(self.user, {
- 'can_moderate_signatures': 0,
- })
- response = self.client.get(
- reverse('misago:moderate_signature', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 403)
- self.assertIn("You can't moderate signatures.", response.content)
- def test_mod_signature(self):
- """user with permission moderates other user signature"""
- self.allow_signature_mod()
- response = self.client.get(
- reverse('misago:moderate_signature', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 200)
- self.allow_signature_mod()
- response = self.client.post(
- reverse('misago:moderate_signature', kwargs=self.link_kwargs),
- data={
- 'signature': 'kittens!',
- 'is_signature_locked': '1',
- 'signature_lock_user_message': 'Test us3r message',
- 'signature_lock_staff_message': 'Test st4ff message'
- })
- self.assertEqual(response.status_code, 302)
- User = get_user_model()
- updated_user = User.objects.get(id=self.test_user.pk)
- self.assertTrue(updated_user.is_signature_locked)
- self.assertEqual(updated_user.signature_parsed, '<p>kittens!</p>')
- self.assertEqual(updated_user.signature_lock_user_message,
- 'Test us3r message')
- self.assertEqual(updated_user.signature_lock_staff_message,
- 'Test st4ff message')
- self.allow_signature_mod()
- response = self.client.get(
- reverse('misago:moderate_signature', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 200)
- self.assertIn('Test us3r message', response.content)
- self.assertIn('Test st4ff message', response.content)
- class BanUserTests(UserModerationTestCase):
- def allow_ban_user(self):
- override_acl(self.user, {
- 'can_ban_users': 1,
- 'max_ban_length': 0,
- })
- def test_no_ban_permission(self):
- """user with no permission fails to ban other user"""
- override_acl(self.user, {
- 'can_ban_users': 0,
- })
- response = self.client.get(
- reverse('misago:ban_user', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 403)
- self.assertIn("You can't ban users.", response.content)
- def test_ban_user(self):
- """user with permission bans other user"""
- self.allow_ban_user()
- response = self.client.get(
- reverse('misago:ban_user', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 200)
- self.allow_ban_user()
- response = self.client.post(
- reverse('misago:ban_user', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 302)
- self.allow_ban_user()
- response = self.client.post(reverse('misago:index'))
- self.assertEqual(response.status_code, 200)
- self.assertIn('Bob has been banned.', response.content)
- Ban.objects.get(banned_value=self.test_user.username.lower())
- class LiftUserBanTests(UserModerationTestCase):
- def allow_lift_ban(self):
- override_acl(self.user, {
- 'can_lift_bans': 1,
- 'max_lifted_ban_length': 0,
- })
- def test_no_lift_ban_permission(self):
- """user with no permission fails to lift user ban"""
- override_acl(self.user, {
- 'can_lift_bans': 0,
- 'max_lifted_ban_length': 0,
- })
- Ban.objects.create(banned_value=self.test_user.username)
- response = self.client.post(
- reverse('misago:lift_user_ban', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 403)
- self.assertIn("You can't lift bans.", response.content)
- def test_lift_user_ban(self):
- """user with permission lifts other user ban"""
- test_ban = Ban.objects.create(banned_value=self.test_user.username)
- self.allow_lift_ban()
- response = self.client.post(
- reverse('misago:lift_user_ban', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 302)
- self.allow_lift_ban()
- response = self.client.post(reverse('misago:index'))
- self.assertEqual(response.status_code, 200)
- self.assertIn('ban has been lifted.', response.content)
- test_ban = Ban.objects.get(id=test_ban.pk)
- self.assertTrue(test_ban.is_expired)
- class DeleteUserTests(UserModerationTestCase):
- def test_no_delete_permission(self):
- """user with no permission fails to delete other user"""
- override_acl(self.user, {
- 'can_delete_users_newer_than': 0,
- 'can_delete_users_with_less_posts_than': 0,
- })
- response = self.client.post(
- reverse('misago:delete_user', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 403)
- self.assertIn("You can't delete users.", response.content)
- def test_delete_user(self):
- """user with permission deletes other user"""
- override_acl(self.user, {
- 'can_delete_users_newer_than': 5,
- 'can_delete_users_with_less_posts_than': 5,
- })
- response = self.client.post(
- reverse('misago:delete_user', kwargs=self.link_kwargs))
- self.assertEqual(response.status_code, 302)
- response = self.client.post(reverse('misago:index'))
- self.assertEqual(response.status_code, 200)
- self.assertIn('Bob has been deleted', response.content)
|