test_thread_start_api.py 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363
  1. # -*- coding: utf-8 -*-
  2. from __future__ import unicode_literals
  3. import json
  4. from django.utils.encoding import smart_str
  5. from misago.acl.testutils import override_acl
  6. from misago.categories.models import THREADS_ROOT_NAME, Category
  7. from misago.users.testutils import AuthenticatedUserTestCase
  8. from ..models import Thread
  9. from ..threadtypes import trees_map
  10. class StartThreadTests(AuthenticatedUserTestCase):
  11. def setUp(self):
  12. super(StartThreadTests, self).setUp()
  13. threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
  14. self.category = Category.objects.get(slug='first-category')
  15. self.api_link = '/api/threads/'
  16. def override_acl(self, extra_acl=None):
  17. new_acl = self.user.acl
  18. new_acl['categories'][self.category.pk].update({
  19. 'can_see': 1,
  20. 'can_browse': 1,
  21. 'can_start_threads': 1,
  22. 'can_pin_threads': 0,
  23. 'can_close_threads': 0,
  24. 'can_hide_threads': 0,
  25. 'can_hide_own_threads': 0
  26. })
  27. if extra_acl:
  28. new_acl['categories'][self.category.pk].update(extra_acl)
  29. if 'can_see' in extra_acl and not extra_acl['can_see']:
  30. new_acl['visible_categories'].remove(self.category.pk)
  31. new_acl['browseable_categories'].remove(self.category.pk)
  32. if 'can_browse' in extra_acl and not extra_acl['can_browse']:
  33. new_acl['browseable_categories'].remove(self.category.pk)
  34. override_acl(self.user, new_acl)
  35. def test_cant_start_thread_as_guest(self):
  36. """user has to be authenticated to be able to post thread"""
  37. self.logout_user()
  38. response = self.client.post(self.api_link)
  39. self.assertEqual(response.status_code, 403)
  40. def test_cant_see(self):
  41. """has no permission to see selected category"""
  42. self.override_acl({'can_see': 0})
  43. response = self.client.post(self.api_link, {
  44. 'category': self.category.pk
  45. })
  46. self.assertContains(response, "Selected category is invalid.", status_code=400)
  47. def test_cant_browse(self):
  48. """has no permission to browse selected category"""
  49. self.override_acl({'can_browse': 0})
  50. response = self.client.post(self.api_link, {
  51. 'category': self.category.pk
  52. })
  53. self.assertContains(response, "Selected category is invalid.", status_code=400)
  54. def test_cant_start_thread(self):
  55. """permission to start thread in category is validated"""
  56. self.override_acl({'can_start_threads': 0})
  57. response = self.client.post(self.api_link, {
  58. 'category': self.category.pk
  59. })
  60. self.assertContains(response, "You don't have permission to start new threads", status_code=400)
  61. def test_cant_start_thread_in_locked_category(self):
  62. """can't post in closed category"""
  63. self.category.is_closed = True
  64. self.category.save()
  65. self.override_acl({'can_close_threads': 0})
  66. response = self.client.post(self.api_link, {
  67. 'category': self.category.pk
  68. })
  69. self.assertContains(response, "This category is closed.", status_code=400)
  70. def test_cant_start_thread_in_invalid_category(self):
  71. """can't post in invalid category"""
  72. self.category.is_closed = True
  73. self.category.save()
  74. self.override_acl({'can_close_threads': 0})
  75. response = self.client.post(self.api_link, {
  76. 'category': self.category.pk * 100000
  77. })
  78. self.assertContains(response, "Selected category doesn't exist", status_code=400)
  79. def test_empty_data(self):
  80. """no data sent handling has no showstoppers"""
  81. self.override_acl()
  82. response = self.client.post(self.api_link, data={})
  83. self.assertEqual(response.status_code, 400)
  84. self.assertEqual(json.loads(smart_str(response.content)), {
  85. 'category': [
  86. "You have to select category to post thread in."
  87. ],
  88. 'title':[
  89. "You have to enter thread title."
  90. ],
  91. 'post': [
  92. "You have to enter a message."
  93. ]
  94. })
  95. def test_title_is_validated(self):
  96. """title is validated"""
  97. self.override_acl()
  98. response = self.client.post(self.api_link, data={
  99. 'category': self.category.pk,
  100. 'title': "------",
  101. 'post': "Lorem ipsum dolor met, sit amet elit!",
  102. })
  103. self.assertEqual(response.status_code, 400)
  104. self.assertEqual(json.loads(smart_str(response.content)), {
  105. 'title': [
  106. "Thread title should contain alpha-numeric characters."
  107. ]
  108. })
  109. def test_post_is_validated(self):
  110. """post is validated"""
  111. self.override_acl()
  112. response = self.client.post(self.api_link, data={
  113. 'category': self.category.pk,
  114. 'title': "Lorem ipsum dolor met",
  115. 'post': "a",
  116. })
  117. self.assertEqual(response.status_code, 400)
  118. self.assertEqual(json.loads(smart_str(response.content)), {
  119. 'post': [
  120. "Posted message should be at least 5 characters long (it has 1)."
  121. ]
  122. })
  123. def test_can_start_thread(self):
  124. """endpoint creates new thread"""
  125. self.override_acl()
  126. response = self.client.post(self.api_link, data={
  127. 'category': self.category.pk,
  128. 'title': "Hello, I am test thread!",
  129. 'post': "Lorem ipsum dolor met!"
  130. })
  131. self.assertEqual(response.status_code, 200)
  132. thread = self.user.thread_set.all()[:1][0]
  133. response_json = json.loads(smart_str(response.content))
  134. self.assertEqual(response_json['url'], thread.get_absolute_url())
  135. self.override_acl()
  136. response = self.client.get(thread.get_absolute_url())
  137. self.assertContains(response, self.category.name)
  138. self.assertContains(response, thread.title)
  139. self.assertContains(response, "<p>Lorem ipsum dolor met!</p>")
  140. self.reload_user()
  141. self.assertEqual(self.user.threads, 1)
  142. self.assertEqual(self.user.posts, 1)
  143. self.assertEqual(thread.category_id, self.category.pk)
  144. self.assertEqual(thread.title, "Hello, I am test thread!")
  145. self.assertEqual(thread.starter_id, self.user.id)
  146. self.assertEqual(thread.starter_name, self.user.username)
  147. self.assertEqual(thread.starter_slug, self.user.slug)
  148. self.assertEqual(thread.last_poster_id, self.user.id)
  149. self.assertEqual(thread.last_poster_name, self.user.username)
  150. self.assertEqual(thread.last_poster_slug, self.user.slug)
  151. post = self.user.post_set.all()[:1][0]
  152. self.assertEqual(post.category_id, self.category.pk)
  153. self.assertEqual(post.original, 'Lorem ipsum dolor met!')
  154. self.assertEqual(post.poster_id, self.user.id)
  155. self.assertEqual(post.poster_name, self.user.username)
  156. category = Category.objects.get(pk=self.category.pk)
  157. self.assertEqual(category.threads, 1)
  158. self.assertEqual(category.posts, 1)
  159. self.assertEqual(category.last_thread_id, thread.id)
  160. self.assertEqual(category.last_thread_title, thread.title)
  161. self.assertEqual(category.last_thread_slug, thread.slug)
  162. self.assertEqual(category.last_poster_id, self.user.id)
  163. self.assertEqual(category.last_poster_name, self.user.username)
  164. self.assertEqual(category.last_poster_slug, self.user.slug)
  165. def test_start_closed_thread_no_permission(self):
  166. """permission is checked before thread is closed"""
  167. self.override_acl({'can_close_threads': 0})
  168. response = self.client.post(self.api_link, data={
  169. 'category': self.category.pk,
  170. 'title': "Hello, I am test thread!",
  171. 'post': "Lorem ipsum dolor met!",
  172. 'close': True
  173. })
  174. self.assertEqual(response.status_code, 200)
  175. thread = self.user.thread_set.all()[:1][0]
  176. self.assertFalse(thread.is_closed)
  177. def test_start_closed_thread(self):
  178. """can post closed thread"""
  179. self.override_acl({'can_close_threads': 1})
  180. response = self.client.post(self.api_link, data={
  181. 'category': self.category.pk,
  182. 'title': "Hello, I am test thread!",
  183. 'post': "Lorem ipsum dolor met!",
  184. 'close': True
  185. })
  186. self.assertEqual(response.status_code, 200)
  187. thread = self.user.thread_set.all()[:1][0]
  188. self.assertTrue(thread.is_closed)
  189. def test_start_unpinned_thread(self):
  190. """can post unpinned thread"""
  191. self.override_acl({'can_pin_threads': 1})
  192. response = self.client.post(self.api_link, data={
  193. 'category': self.category.pk,
  194. 'title': "Hello, I am test thread!",
  195. 'post': "Lorem ipsum dolor met!",
  196. 'pin': 0
  197. })
  198. self.assertEqual(response.status_code, 200)
  199. thread = self.user.thread_set.all()[:1][0]
  200. self.assertEqual(thread.weight, 0)
  201. def test_start_locally_pinned_thread(self):
  202. """can post locally pinned thread"""
  203. self.override_acl({'can_pin_threads': 1})
  204. response = self.client.post(self.api_link, data={
  205. 'category': self.category.pk,
  206. 'title': "Hello, I am test thread!",
  207. 'post': "Lorem ipsum dolor met!",
  208. 'pin': 1
  209. })
  210. self.assertEqual(response.status_code, 200)
  211. thread = self.user.thread_set.all()[:1][0]
  212. self.assertEqual(thread.weight, 1)
  213. def test_start_globally_pinned_thread(self):
  214. """can post globally pinned thread"""
  215. self.override_acl({'can_pin_threads': 2})
  216. response = self.client.post(self.api_link, data={
  217. 'category': self.category.pk,
  218. 'title': "Hello, I am test thread!",
  219. 'post': "Lorem ipsum dolor met!",
  220. 'pin': 2
  221. })
  222. self.assertEqual(response.status_code, 200)
  223. thread = self.user.thread_set.all()[:1][0]
  224. self.assertEqual(thread.weight, 2)
  225. def test_start_globally_pinned_thread_no_permission(self):
  226. """cant post globally pinned thread without permission"""
  227. self.override_acl({'can_pin_threads': 1})
  228. response = self.client.post(self.api_link, data={
  229. 'category': self.category.pk,
  230. 'title': "Hello, I am test thread!",
  231. 'post': "Lorem ipsum dolor met!",
  232. 'pin': 2
  233. })
  234. self.assertEqual(response.status_code, 200)
  235. thread = self.user.thread_set.all()[:1][0]
  236. self.assertEqual(thread.weight, 0)
  237. def test_start_locally_pinned_thread_no_permission(self):
  238. """cant post locally pinned thread without permission"""
  239. self.override_acl({'can_pin_threads': 0})
  240. response = self.client.post(self.api_link, data={
  241. 'category': self.category.pk,
  242. 'title': "Hello, I am test thread!",
  243. 'post': "Lorem ipsum dolor met!",
  244. 'pin': 1
  245. })
  246. self.assertEqual(response.status_code, 200)
  247. thread = self.user.thread_set.all()[:1][0]
  248. self.assertEqual(thread.weight, 0)
  249. def test_start_hidden_thread(self):
  250. """can post hidden thread"""
  251. self.override_acl({'can_hide_threads': 1})
  252. response = self.client.post(self.api_link, data={
  253. 'category': self.category.pk,
  254. 'title': "Hello, I am test thread!",
  255. 'post': "Lorem ipsum dolor met!",
  256. 'hide': 1
  257. })
  258. self.assertEqual(response.status_code, 200)
  259. thread = self.user.thread_set.all()[:1][0]
  260. self.assertTrue(thread.is_hidden)
  261. category = Category.objects.get(pk=self.category.pk)
  262. self.assertNotEqual(category.last_thread_id, thread.id)
  263. def test_start_hidden_thread_no_permission(self):
  264. """cant post hidden thread without permission"""
  265. self.override_acl({'can_hide_threads': 0})
  266. response = self.client.post(self.api_link, data={
  267. 'category': self.category.pk,
  268. 'title': "Hello, I am test thread!",
  269. 'post': "Lorem ipsum dolor met!",
  270. 'hide': 1
  271. })
  272. self.assertEqual(response.status_code, 200)
  273. thread = self.user.thread_set.all()[:1][0]
  274. self.assertFalse(thread.is_hidden)
  275. def test_post_unicode(self):
  276. """unicode characters can be posted"""
  277. self.override_acl()
  278. response = self.client.post(self.api_link, data={
  279. 'category': self.category.pk,
  280. 'title': "Brzęczyżczykiewicz",
  281. 'post': "Chrzążczyżewoszyce, powiat Łękółody."
  282. })
  283. self.assertEqual(response.status_code, 200)