test_thread_reply_api.py 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327
  1. # -*- coding: utf-8 -*-
  2. from __future__ import unicode_literals
  3. from django.urls import reverse
  4. from misago.acl.testutils import override_acl
  5. from misago.categories.models import Category
  6. from misago.threads import testutils
  7. from misago.threads.models import Thread
  8. from misago.users.testutils import AuthenticatedUserTestCase
  9. class ReplyThreadTests(AuthenticatedUserTestCase):
  10. def setUp(self):
  11. super(ReplyThreadTests, self).setUp()
  12. self.category = Category.objects.get(slug='first-category')
  13. self.thread = testutils.post_thread(category=self.category)
  14. self.api_link = reverse(
  15. 'misago:api:thread-post-list', kwargs={
  16. 'thread_pk': self.thread.pk,
  17. }
  18. )
  19. def override_acl(self, extra_acl=None):
  20. new_acl = self.user.acl_cache
  21. new_acl['categories'][self.category.pk].update({
  22. 'can_see': 1,
  23. 'can_browse': 1,
  24. 'can_start_threads': 0,
  25. 'can_reply_threads': 1,
  26. })
  27. if extra_acl:
  28. new_acl['categories'][self.category.pk].update(extra_acl)
  29. override_acl(self.user, new_acl)
  30. def test_cant_reply_thread_as_guest(self):
  31. """user has to be authenticated to be able to post reply"""
  32. self.logout_user()
  33. response = self.client.post(self.api_link)
  34. self.assertEqual(response.status_code, 403)
  35. self.assertEqual(response.json(), {
  36. 'detail': "You can't reply to threads in this category.",
  37. })
  38. def test_thread_visibility(self):
  39. """thread's visibility is validated"""
  40. self.override_acl({'can_see': 0})
  41. response = self.client.post(self.api_link)
  42. self.assertEqual(response.status_code, 404)
  43. self.override_acl({'can_browse': 0})
  44. response = self.client.post(self.api_link)
  45. self.assertEqual(response.status_code, 404)
  46. self.override_acl({'can_see_all_threads': 0})
  47. response = self.client.post(self.api_link)
  48. self.assertEqual(response.status_code, 404)
  49. def test_cant_reply_thread(self):
  50. """permission to reply thread is validated"""
  51. self.override_acl({'can_reply_threads': 0})
  52. response = self.client.post(self.api_link)
  53. self.assertEqual(response.status_code, 403)
  54. self.assertEqual(response.json(), {
  55. 'detail': "You can't reply to threads in this category.",
  56. })
  57. def test_closed_category(self):
  58. """permssion to reply in closed category is validated"""
  59. self.override_acl({'can_close_threads': 0})
  60. self.category.is_closed = True
  61. self.category.save()
  62. response = self.client.post(self.api_link)
  63. self.assertContains(
  64. response,
  65. "This category is closed. You can't reply to threads in it.",
  66. status_code=403
  67. )
  68. # allow to post in closed category
  69. self.override_acl({'can_close_threads': 1})
  70. response = self.client.post(self.api_link)
  71. self.assertEqual(response.status_code, 400)
  72. def test_closed_thread(self):
  73. """permssion to reply in closed thread is validated"""
  74. self.override_acl({'can_close_threads': 0})
  75. self.thread.is_closed = True
  76. self.thread.save()
  77. response = self.client.post(self.api_link)
  78. self.assertContains(
  79. response, "You can't reply to closed threads in this category.", status_code=403
  80. )
  81. # allow to post in closed thread
  82. self.override_acl({'can_close_threads': 1})
  83. response = self.client.post(self.api_link)
  84. self.assertEqual(response.status_code, 400)
  85. def test_empty_data(self):
  86. """no data sent handling has no showstoppers"""
  87. self.override_acl()
  88. response = self.client.post(self.api_link, data={})
  89. self.assertContains(response, "You have to enter a message.", status_code=400)
  90. def test_invalid_data(self):
  91. """api errors for invalid request data"""
  92. self.override_acl()
  93. response = self.client.post(
  94. self.api_link,
  95. 'false',
  96. content_type="application/json",
  97. )
  98. self.assertContains(response, "Invalid data.", status_code=400)
  99. def test_post_is_validated(self):
  100. """post is validated"""
  101. self.override_acl()
  102. response = self.client.post(
  103. self.api_link, data={
  104. 'post': "a",
  105. }
  106. )
  107. self.assertEqual(response.status_code, 400)
  108. self.assertEqual(
  109. response.json(), {
  110. 'post': ["Posted message should be at least 5 characters long (it has 1)."],
  111. }
  112. )
  113. def test_can_reply_thread(self):
  114. """endpoint creates new reply"""
  115. self.override_acl()
  116. response = self.client.post(
  117. self.api_link, data={
  118. 'post': "This is test response!",
  119. }
  120. )
  121. self.assertEqual(response.status_code, 200)
  122. thread = Thread.objects.get(pk=self.thread.pk)
  123. self.override_acl()
  124. response = self.client.get(self.thread.get_absolute_url())
  125. self.assertContains(response, "<p>This is test response!</p>")
  126. # api increased user's posts counts
  127. self.reload_user()
  128. self.assertEqual(self.user.threads, 0)
  129. self.assertEqual(self.user.posts, 1)
  130. post = self.user.post_set.all()[:1][0]
  131. self.assertEqual(post.category_id, self.category.pk)
  132. self.assertEqual(post.original, "This is test response!")
  133. self.assertEqual(post.poster_id, self.user.id)
  134. self.assertEqual(post.poster_name, self.user.username)
  135. self.assertEqual(thread.last_post_id, post.id)
  136. self.assertEqual(thread.last_poster_id, self.user.id)
  137. self.assertEqual(thread.last_poster_name, self.user.username)
  138. self.assertEqual(thread.last_poster_slug, self.user.slug)
  139. category = Category.objects.get(pk=self.category.pk)
  140. self.assertEqual(category.last_thread_id, thread.id)
  141. self.assertEqual(category.last_thread_title, thread.title)
  142. self.assertEqual(category.last_thread_slug, thread.slug)
  143. self.assertEqual(category.last_poster_id, self.user.id)
  144. self.assertEqual(category.last_poster_name, self.user.username)
  145. self.assertEqual(category.last_poster_slug, self.user.slug)
  146. def test_post_unicode(self):
  147. """unicode characters can be posted"""
  148. self.override_acl()
  149. response = self.client.post(
  150. self.api_link, data={
  151. 'post': "Chrzążczyżewoszyce, powiat Łękółody.",
  152. }
  153. )
  154. self.assertEqual(response.status_code, 200)
  155. def test_category_moderation_queue(self):
  156. """reply thread in category that requires approval"""
  157. self.category.require_replies_approval = True
  158. self.category.save()
  159. response = self.client.post(
  160. self.api_link, data={
  161. 'post': "Lorem ipsum dolor met!",
  162. }
  163. )
  164. self.assertEqual(response.status_code, 200)
  165. thread = Thread.objects.get(pk=self.thread.pk)
  166. self.assertFalse(thread.is_unapproved)
  167. self.assertTrue(thread.has_unapproved_posts)
  168. self.assertEqual(thread.replies, self.thread.replies)
  169. post = self.user.post_set.all()[:1][0]
  170. self.assertTrue(post.is_unapproved)
  171. category = Category.objects.get(slug='first-category')
  172. self.assertEqual(category.threads, self.category.threads)
  173. self.assertEqual(category.posts, self.category.posts)
  174. def test_category_moderation_queue_bypass(self):
  175. """bypass moderation queue due to user's acl"""
  176. override_acl(self.user, {'can_approve_content': 1})
  177. self.category.require_replies_approval = True
  178. self.category.save()
  179. response = self.client.post(
  180. self.api_link, data={
  181. 'post': "Lorem ipsum dolor met!",
  182. }
  183. )
  184. self.assertEqual(response.status_code, 200)
  185. thread = Thread.objects.get(pk=self.thread.pk)
  186. self.assertFalse(thread.is_unapproved)
  187. self.assertFalse(thread.has_unapproved_posts)
  188. self.assertEqual(thread.replies, self.thread.replies + 1)
  189. post = self.user.post_set.all()[:1][0]
  190. self.assertFalse(post.is_unapproved)
  191. category = Category.objects.get(slug='first-category')
  192. self.assertEqual(category.threads, self.category.threads)
  193. self.assertEqual(category.posts, self.category.posts + 1)
  194. def test_user_moderation_queue(self):
  195. """reply thread by user that requires approval"""
  196. self.override_acl({'require_replies_approval': 1})
  197. response = self.client.post(
  198. self.api_link, data={
  199. 'post': "Lorem ipsum dolor met!",
  200. }
  201. )
  202. self.assertEqual(response.status_code, 200)
  203. thread = Thread.objects.get(pk=self.thread.pk)
  204. self.assertFalse(thread.is_unapproved)
  205. self.assertTrue(thread.has_unapproved_posts)
  206. self.assertEqual(thread.replies, self.thread.replies)
  207. post = self.user.post_set.all()[:1][0]
  208. self.assertTrue(post.is_unapproved)
  209. category = Category.objects.get(slug='first-category')
  210. self.assertEqual(category.threads, self.category.threads)
  211. self.assertEqual(category.posts, self.category.posts)
  212. def test_user_moderation_queue_bypass(self):
  213. """bypass moderation queue due to user's acl"""
  214. override_acl(self.user, {'can_approve_content': 1})
  215. self.override_acl({'require_replies_approval': 1})
  216. response = self.client.post(
  217. self.api_link, data={
  218. 'post': "Lorem ipsum dolor met!",
  219. }
  220. )
  221. self.assertEqual(response.status_code, 200)
  222. thread = Thread.objects.get(pk=self.thread.pk)
  223. self.assertFalse(thread.is_unapproved)
  224. self.assertFalse(thread.has_unapproved_posts)
  225. self.assertEqual(thread.replies, self.thread.replies + 1)
  226. post = self.user.post_set.all()[:1][0]
  227. self.assertFalse(post.is_unapproved)
  228. category = Category.objects.get(slug='first-category')
  229. self.assertEqual(category.threads, self.category.threads)
  230. self.assertEqual(category.posts, self.category.posts + 1)
  231. def test_omit_other_moderation_queues(self):
  232. """other queues are omitted"""
  233. self.category.require_threads_approval = True
  234. self.category.require_edits_approval = True
  235. self.category.save()
  236. self.override_acl({
  237. 'require_threads_approval': 1,
  238. 'require_edits_approval': 1,
  239. })
  240. response = self.client.post(
  241. self.api_link, data={
  242. 'post': "Lorem ipsum dolor met!",
  243. }
  244. )
  245. self.assertEqual(response.status_code, 200)
  246. thread = Thread.objects.get(pk=self.thread.pk)
  247. self.assertFalse(thread.is_unapproved)
  248. self.assertFalse(thread.has_unapproved_posts)
  249. self.assertEqual(thread.replies, self.thread.replies + 1)
  250. post = self.user.post_set.all()[:1][0]
  251. self.assertFalse(post.is_unapproved)
  252. category = Category.objects.get(slug='first-category')
  253. self.assertEqual(category.threads, self.category.threads)
  254. self.assertEqual(category.posts, self.category.posts + 1)