test_useradmin_views.py 38 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037
  1. from django.contrib.auth import get_user_model
  2. from django.core import mail
  3. from django.urls import reverse
  4. from django.utils import six
  5. from misago.acl.models import Role
  6. from misago.admin.testutils import AdminTestCase
  7. from misago.categories.models import Category
  8. from misago.threads.testutils import post_thread, reply_thread
  9. from misago.users.models import Ban, Rank
  10. UserModel = get_user_model()
  11. class UserAdminViewsTests(AdminTestCase):
  12. AJAX_HEADER = {'HTTP_X_REQUESTED_WITH': 'XMLHttpRequest'}
  13. def test_link_registered(self):
  14. """admin index view contains users link"""
  15. response = self.client.get(reverse('misago:admin:index'))
  16. self.assertContains(response, reverse('misago:admin:users:accounts:index'))
  17. def test_list_view(self):
  18. """users list view returns 200"""
  19. response = self.client.get(reverse('misago:admin:users:accounts:index'))
  20. self.assertEqual(response.status_code, 302)
  21. response = self.client.get(response['location'])
  22. self.assertEqual(response.status_code, 200)
  23. self.assertContains(response, self.user.username)
  24. def test_list_search(self):
  25. """users list is searchable"""
  26. response = self.client.get(reverse('misago:admin:users:accounts:index'))
  27. self.assertEqual(response.status_code, 302)
  28. link_base = response['location']
  29. response = self.client.get(link_base)
  30. self.assertEqual(response.status_code, 200)
  31. user_a = UserModel.objects.create_user('Tyrael', 't123@test.com', 'pass123')
  32. user_b = UserModel.objects.create_user('Tyrion', 't321@test.com', 'pass123')
  33. user_c = UserModel.objects.create_user('Karen', 't432@test.com', 'pass123')
  34. # Search both
  35. response = self.client.get('%s&username=tyr' % link_base)
  36. self.assertEqual(response.status_code, 200)
  37. self.assertContains(response, user_a.username)
  38. self.assertContains(response, user_b.username)
  39. # Search tyrion
  40. response = self.client.get('%s&username=tyrion' % link_base)
  41. self.assertEqual(response.status_code, 200)
  42. self.assertNotContains(response, user_a.username)
  43. self.assertContains(response, user_b.username)
  44. # Search tyrael
  45. response = self.client.get('%s&email=t123@test.com' % link_base)
  46. self.assertEqual(response.status_code, 200)
  47. self.assertContains(response, user_a.username)
  48. self.assertNotContains(response, user_b.username)
  49. # Search disabled
  50. user_c.is_active = False
  51. user_c.save()
  52. response = self.client.get('%s&disabled=1' % link_base)
  53. self.assertEqual(response.status_code, 200)
  54. self.assertNotContains(response, user_a.username)
  55. self.assertNotContains(response, user_b.username)
  56. self.assertContains(response, '<del>%s</del>' % user_c.username)
  57. def test_mass_activation(self):
  58. """users list activates multiple users"""
  59. user_pks = []
  60. for i in range(10):
  61. test_user = UserModel.objects.create_user(
  62. 'Bob%s' % i,
  63. 'bob%s@test.com' % i,
  64. 'pass123',
  65. requires_activation=1,
  66. )
  67. user_pks.append(test_user.pk)
  68. response = self.client.post(
  69. reverse('misago:admin:users:accounts:index'),
  70. data={
  71. 'action': 'activate',
  72. 'selected_items': user_pks,
  73. }
  74. )
  75. self.assertEqual(response.status_code, 302)
  76. inactive_qs = UserModel.objects.filter(
  77. id__in=user_pks,
  78. requires_activation=1,
  79. )
  80. self.assertEqual(inactive_qs.count(), 0)
  81. self.assertIn("has been activated", mail.outbox[0].subject)
  82. def test_mass_ban(self):
  83. """users list bans multiple users"""
  84. user_pks = []
  85. for i in range(10):
  86. test_user = UserModel.objects.create_user(
  87. 'Bob%s' % i,
  88. 'bob%s@test.com' % i,
  89. 'pass123',
  90. requires_activation=1,
  91. )
  92. user_pks.append(test_user.pk)
  93. response = self.client.post(
  94. reverse('misago:admin:users:accounts:index'),
  95. data={
  96. 'action': 'ban',
  97. 'selected_items': user_pks,
  98. }
  99. )
  100. self.assertEqual(response.status_code, 200)
  101. response = self.client.post(
  102. reverse('misago:admin:users:accounts:index'),
  103. data={
  104. 'action': 'ban',
  105. 'selected_items': user_pks,
  106. 'ban_type': ['usernames', 'emails', 'domains', 'ip', 'ip_first', 'ip_two'],
  107. 'finalize': '',
  108. },
  109. )
  110. self.assertEqual(response.status_code, 302)
  111. self.assertEqual(Ban.objects.count(), 24)
  112. def test_mass_delete_accounts_self(self):
  113. """its impossible to delete oneself"""
  114. user_pks = [self.user.pk]
  115. response = self.client.post(
  116. reverse('misago:admin:users:accounts:index'),
  117. data={
  118. 'action': 'delete_accounts',
  119. 'selected_items': user_pks,
  120. }
  121. )
  122. self.assertEqual(response.status_code, 302)
  123. response = self.client.get(response['location'])
  124. self.assertContains(response, "delete yourself")
  125. def test_mass_delete_accounts_admin(self):
  126. """its impossible to delete admin account"""
  127. user_pks = []
  128. for i in range(10):
  129. test_user = UserModel.objects.create_user(
  130. 'Bob%s' % i,
  131. 'bob%s@test.com' % i,
  132. 'pass123',
  133. )
  134. user_pks.append(test_user.pk)
  135. test_user.is_staff = True
  136. test_user.save()
  137. response = self.client.post(
  138. reverse('misago:admin:users:accounts:index'),
  139. data={
  140. 'action': 'delete_accounts',
  141. 'selected_items': user_pks,
  142. }
  143. )
  144. self.assertEqual(response.status_code, 302)
  145. response = self.client.get(response['location'])
  146. self.assertContains(response, "is admin and can")
  147. self.assertContains(response, "be deleted.")
  148. self.assertEqual(UserModel.objects.count(), 11)
  149. def test_mass_delete_accounts_superadmin(self):
  150. """its impossible to delete superadmin account"""
  151. user_pks = []
  152. for i in range(10):
  153. test_user = UserModel.objects.create_user(
  154. 'Bob%s' % i,
  155. 'bob%s@test.com' % i,
  156. 'pass123',
  157. )
  158. user_pks.append(test_user.pk)
  159. test_user.is_superuser = True
  160. test_user.save()
  161. response = self.client.post(
  162. reverse('misago:admin:users:accounts:index'),
  163. data={
  164. 'action': 'delete_accounts',
  165. 'selected_items': user_pks,
  166. }
  167. )
  168. self.assertEqual(response.status_code, 302)
  169. response = self.client.get(response['location'])
  170. self.assertContains(response, "is admin and can")
  171. self.assertContains(response, "be deleted.")
  172. self.assertEqual(UserModel.objects.count(), 11)
  173. def test_mass_delete_accounts(self):
  174. """users list deletes users"""
  175. # create 10 users to delete
  176. user_pks = []
  177. for i in range(10):
  178. test_user = UserModel.objects.create_user(
  179. 'Bob%s' % i,
  180. 'bob%s@test.com' % i,
  181. 'pass123',
  182. requires_activation=0,
  183. )
  184. user_pks.append(test_user.pk)
  185. # create 10 more users that won't be deleted
  186. for i in range(10):
  187. test_user = UserModel.objects.create_user(
  188. 'Weebl%s' % i,
  189. 'weebl%s@test.com' % i,
  190. 'pass123',
  191. requires_activation=0,
  192. )
  193. response = self.client.post(
  194. reverse('misago:admin:users:accounts:index'),
  195. data={
  196. 'action': 'delete_accounts',
  197. 'selected_items': user_pks,
  198. }
  199. )
  200. self.assertEqual(response.status_code, 302)
  201. self.assertEqual(UserModel.objects.count(), 11)
  202. def test_mass_delete_all_self(self):
  203. """its impossible to delete oneself with content"""
  204. user_pks = [self.user.pk]
  205. response = self.client.post(
  206. reverse('misago:admin:users:accounts:index'),
  207. data={
  208. 'action': 'delete_all',
  209. 'selected_items': user_pks,
  210. }
  211. )
  212. self.assertEqual(response.status_code, 302)
  213. response = self.client.get(response['location'])
  214. self.assertContains(response, "delete yourself")
  215. def test_mass_delete_all_admin(self):
  216. """its impossible to delete admin account and content"""
  217. user_pks = []
  218. for i in range(10):
  219. test_user = UserModel.objects.create_user(
  220. 'Bob%s' % i,
  221. 'bob%s@test.com' % i,
  222. 'pass123',
  223. )
  224. user_pks.append(test_user.pk)
  225. test_user.is_staff = True
  226. test_user.save()
  227. response = self.client.post(
  228. reverse('misago:admin:users:accounts:index'),
  229. data={
  230. 'action': 'delete_all',
  231. 'selected_items': user_pks,
  232. }
  233. )
  234. self.assertEqual(response.status_code, 302)
  235. response = self.client.get(response['location'])
  236. self.assertContains(response, "is admin and can")
  237. self.assertContains(response, "be deleted.")
  238. self.assertEqual(UserModel.objects.count(), 11)
  239. def test_mass_delete_all_superadmin(self):
  240. """its impossible to delete superadmin account and content"""
  241. user_pks = []
  242. for i in range(10):
  243. test_user = UserModel.objects.create_user(
  244. 'Bob%s' % i,
  245. 'bob%s@test.com' % i,
  246. 'pass123',
  247. )
  248. user_pks.append(test_user.pk)
  249. test_user.is_superuser = True
  250. test_user.save()
  251. response = self.client.post(
  252. reverse('misago:admin:users:accounts:index'),
  253. data={
  254. 'action': 'delete_all',
  255. 'selected_items': user_pks,
  256. }
  257. )
  258. self.assertEqual(response.status_code, 302)
  259. response = self.client.get(response['location'])
  260. self.assertContains(response, "is admin and can")
  261. self.assertContains(response, "be deleted.")
  262. self.assertEqual(UserModel.objects.count(), 11)
  263. def test_mass_delete_all(self):
  264. """users list mass deleting view has no showstoppers"""
  265. user_pks = []
  266. for i in range(10):
  267. test_user = UserModel.objects.create_user(
  268. 'Bob%s' % i,
  269. 'bob%s@test.com' % i,
  270. 'pass123',
  271. requires_activation=1,
  272. )
  273. user_pks.append(test_user.pk)
  274. response = self.client.post(
  275. reverse('misago:admin:users:accounts:index'),
  276. data={
  277. 'action': 'delete_all',
  278. 'selected_items': user_pks,
  279. }
  280. )
  281. self.assertEqual(response.status_code, 200)
  282. # asser that no user has been deleted, because actuall deleting happens in
  283. # dedicated views called via ajax from JavaScript
  284. self.assertEqual(UserModel.objects.count(), 11)
  285. def test_new_view(self):
  286. """new user view creates account"""
  287. response = self.client.get(reverse('misago:admin:users:accounts:new'))
  288. self.assertEqual(response.status_code, 200)
  289. default_rank = Rank.objects.get_default()
  290. authenticated_role = Role.objects.get(special_role='authenticated')
  291. response = self.client.post(
  292. reverse('misago:admin:users:accounts:new'),
  293. data={
  294. 'username': 'Bawww',
  295. 'rank': six.text_type(default_rank.pk),
  296. 'roles': six.text_type(authenticated_role.pk),
  297. 'email': 'reg@stered.com',
  298. 'new_password': 'pass123',
  299. 'staff_level': '0',
  300. }
  301. )
  302. self.assertEqual(response.status_code, 302)
  303. UserModel.objects.get_by_username('Bawww')
  304. test_user = UserModel.objects.get_by_email('reg@stered.com')
  305. self.assertTrue(test_user.check_password('pass123'))
  306. def test_new_view_password_with_whitespaces(self):
  307. """new user view creates account with whitespaces password"""
  308. response = self.client.get(reverse('misago:admin:users:accounts:new'))
  309. self.assertEqual(response.status_code, 200)
  310. default_rank = Rank.objects.get_default()
  311. authenticated_role = Role.objects.get(special_role='authenticated')
  312. response = self.client.post(
  313. reverse('misago:admin:users:accounts:new'),
  314. data={
  315. 'username': 'Bawww',
  316. 'rank': six.text_type(default_rank.pk),
  317. 'roles': six.text_type(authenticated_role.pk),
  318. 'email': 'reg@stered.com',
  319. 'new_password': ' pass123 ',
  320. 'staff_level': '0',
  321. }
  322. )
  323. self.assertEqual(response.status_code, 302)
  324. UserModel.objects.get_by_username('Bawww')
  325. test_user = UserModel.objects.get_by_email('reg@stered.com')
  326. self.assertTrue(test_user.check_password(' pass123 '))
  327. def test_edit_view(self):
  328. """edit user view changes account"""
  329. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  330. test_link = reverse(
  331. 'misago:admin:users:accounts:edit', kwargs={
  332. 'pk': test_user.pk,
  333. }
  334. )
  335. response = self.client.get(test_link)
  336. self.assertEqual(response.status_code, 200)
  337. response = self.client.post(
  338. test_link,
  339. data={
  340. 'username': 'Bawww',
  341. 'rank': six.text_type(test_user.rank_id),
  342. 'roles': six.text_type(test_user.roles.all()[0].pk),
  343. 'email': 'reg@stered.com',
  344. 'new_password': 'newpass123',
  345. 'staff_level': '0',
  346. 'signature': 'Hello world!',
  347. 'is_signature_locked': '1',
  348. 'is_hiding_presence': '0',
  349. 'limits_private_thread_invites_to': '0',
  350. 'signature_lock_staff_message': 'Staff message',
  351. 'signature_lock_user_message': 'User message',
  352. 'subscribe_to_started_threads': '2',
  353. 'subscribe_to_replied_threads': '2',
  354. }
  355. )
  356. self.assertEqual(response.status_code, 302)
  357. updated_user = UserModel.objects.get(pk=test_user.pk)
  358. self.assertTrue(updated_user.check_password('newpass123'))
  359. self.assertEqual(updated_user.username, 'Bawww')
  360. self.assertEqual(updated_user.slug, 'bawww')
  361. UserModel.objects.get_by_username('Bawww')
  362. UserModel.objects.get_by_email('reg@stered.com')
  363. def test_edit_dont_change_username(self):
  364. """
  365. If username wasn't changed, don't touch user's username, slug or history
  366. This is regression test for issue #640
  367. """
  368. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  369. test_link = reverse(
  370. 'misago:admin:users:accounts:edit', kwargs={
  371. 'pk': test_user.pk,
  372. }
  373. )
  374. response = self.client.get(test_link)
  375. self.assertEqual(response.status_code, 200)
  376. response = self.client.post(
  377. test_link,
  378. data={
  379. 'username': 'Bob',
  380. 'rank': six.text_type(test_user.rank_id),
  381. 'roles': six.text_type(test_user.roles.all()[0].pk),
  382. 'email': 'reg@stered.com',
  383. 'new_password': 'pass123',
  384. 'signature': 'Hello world!',
  385. 'is_signature_locked': '1',
  386. 'is_hiding_presence': '0',
  387. 'limits_private_thread_invites_to': '0',
  388. 'signature_lock_staff_message': 'Staff message',
  389. 'signature_lock_user_message': 'User message',
  390. 'subscribe_to_started_threads': '2',
  391. 'subscribe_to_replied_threads': '2',
  392. }
  393. )
  394. self.assertEqual(response.status_code, 302)
  395. updated_user = UserModel.objects.get(pk=test_user.pk)
  396. self.assertEqual(updated_user.username, 'Bob')
  397. self.assertEqual(updated_user.slug, 'bob')
  398. self.assertEqual(updated_user.namechanges.count(), 0)
  399. def test_edit_change_password_whitespaces(self):
  400. """edit user view changes account password to include whitespaces"""
  401. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  402. test_link = reverse(
  403. 'misago:admin:users:accounts:edit', kwargs={
  404. 'pk': test_user.pk,
  405. }
  406. )
  407. response = self.client.get(test_link)
  408. self.assertEqual(response.status_code, 200)
  409. response = self.client.post(
  410. test_link,
  411. data={
  412. 'username': 'Bawww',
  413. 'rank': six.text_type(test_user.rank_id),
  414. 'roles': six.text_type(test_user.roles.all()[0].pk),
  415. 'email': 'reg@stered.com',
  416. 'new_password': ' newpass123 ',
  417. 'staff_level': '0',
  418. 'signature': 'Hello world!',
  419. 'is_signature_locked': '1',
  420. 'is_hiding_presence': '0',
  421. 'limits_private_thread_invites_to': '0',
  422. 'signature_lock_staff_message': 'Staff message',
  423. 'signature_lock_user_message': 'User message',
  424. 'subscribe_to_started_threads': '2',
  425. 'subscribe_to_replied_threads': '2',
  426. }
  427. )
  428. self.assertEqual(response.status_code, 302)
  429. updated_user = UserModel.objects.get(pk=test_user.pk)
  430. self.assertTrue(updated_user.check_password(' newpass123 '))
  431. self.assertEqual(updated_user.username, 'Bawww')
  432. self.assertEqual(updated_user.slug, 'bawww')
  433. UserModel.objects.get_by_username('Bawww')
  434. UserModel.objects.get_by_email('reg@stered.com')
  435. def test_edit_make_admin(self):
  436. """edit user view allows super admin to make other user admin"""
  437. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  438. test_link = reverse(
  439. 'misago:admin:users:accounts:edit', kwargs={
  440. 'pk': test_user.pk,
  441. }
  442. )
  443. response = self.client.get(test_link)
  444. self.assertContains(response, 'id="id_is_staff_1"')
  445. self.assertContains(response, 'id="id_is_superuser_1"')
  446. response = self.client.post(
  447. test_link,
  448. data={
  449. 'username': 'Bawww',
  450. 'rank': six.text_type(test_user.rank_id),
  451. 'roles': six.text_type(test_user.roles.all()[0].pk),
  452. 'email': 'reg@stered.com',
  453. 'new_password': 'pass123',
  454. 'is_staff': '1',
  455. 'is_superuser': '0',
  456. 'signature': 'Hello world!',
  457. 'is_signature_locked': '1',
  458. 'is_hiding_presence': '0',
  459. 'limits_private_thread_invites_to': '0',
  460. 'signature_lock_staff_message': 'Staff message',
  461. 'signature_lock_user_message': 'User message',
  462. 'subscribe_to_started_threads': '2',
  463. 'subscribe_to_replied_threads': '2',
  464. }
  465. )
  466. self.assertEqual(response.status_code, 302)
  467. updated_user = UserModel.objects.get(pk=test_user.pk)
  468. self.assertTrue(updated_user.is_staff)
  469. self.assertFalse(updated_user.is_superuser)
  470. def test_edit_make_superadmin_admin(self):
  471. """edit user view allows super admin to make other user super admin"""
  472. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  473. test_link = reverse(
  474. 'misago:admin:users:accounts:edit', kwargs={
  475. 'pk': test_user.pk,
  476. }
  477. )
  478. response = self.client.get(test_link)
  479. self.assertContains(response, 'id="id_is_staff_1"')
  480. self.assertContains(response, 'id="id_is_superuser_1"')
  481. response = self.client.post(
  482. test_link,
  483. data={
  484. 'username': 'Bawww',
  485. 'rank': six.text_type(test_user.rank_id),
  486. 'roles': six.text_type(test_user.roles.all()[0].pk),
  487. 'email': 'reg@stered.com',
  488. 'new_password': 'pass123',
  489. 'is_staff': '0',
  490. 'is_superuser': '1',
  491. 'signature': 'Hello world!',
  492. 'is_signature_locked': '1',
  493. 'is_hiding_presence': '0',
  494. 'limits_private_thread_invites_to': '0',
  495. 'signature_lock_staff_message': 'Staff message',
  496. 'signature_lock_user_message': 'User message',
  497. 'subscribe_to_started_threads': '2',
  498. 'subscribe_to_replied_threads': '2',
  499. }
  500. )
  501. self.assertEqual(response.status_code, 302)
  502. updated_user = UserModel.objects.get(pk=test_user.pk)
  503. self.assertFalse(updated_user.is_staff)
  504. self.assertTrue(updated_user.is_superuser)
  505. def test_edit_denote_superadmin(self):
  506. """edit user view allows super admin to denote other super admin"""
  507. test_user = UserModel.objects.create_user(
  508. 'Bob',
  509. 'bob@test.com',
  510. 'pass123',
  511. is_staff=True,
  512. is_superuser=True,
  513. )
  514. test_link = reverse(
  515. 'misago:admin:users:accounts:edit', kwargs={
  516. 'pk': test_user.pk,
  517. }
  518. )
  519. response = self.client.get(test_link)
  520. self.assertContains(response, 'id="id_is_staff_1"')
  521. self.assertContains(response, 'id="id_is_superuser_1"')
  522. response = self.client.post(
  523. test_link,
  524. data={
  525. 'username': 'Bawww',
  526. 'rank': six.text_type(test_user.rank_id),
  527. 'roles': six.text_type(test_user.roles.all()[0].pk),
  528. 'email': 'reg@stered.com',
  529. 'new_password': 'pass123',
  530. 'is_staff': '0',
  531. 'is_superuser': '0',
  532. 'signature': 'Hello world!',
  533. 'is_signature_locked': '1',
  534. 'is_hiding_presence': '0',
  535. 'limits_private_thread_invites_to': '0',
  536. 'signature_lock_staff_message': 'Staff message',
  537. 'signature_lock_user_message': 'User message',
  538. 'subscribe_to_started_threads': '2',
  539. 'subscribe_to_replied_threads': '2',
  540. }
  541. )
  542. self.assertEqual(response.status_code, 302)
  543. updated_user = UserModel.objects.get(pk=test_user.pk)
  544. self.assertFalse(updated_user.is_staff)
  545. self.assertFalse(updated_user.is_superuser)
  546. def test_edit_cant_make_admin(self):
  547. """edit user view forbids admins from making other admins"""
  548. self.user.is_superuser = False
  549. self.user.save()
  550. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  551. test_link = reverse(
  552. 'misago:admin:users:accounts:edit', kwargs={
  553. 'pk': test_user.pk,
  554. }
  555. )
  556. response = self.client.get(test_link)
  557. self.assertNotContains(response, 'id="id_is_staff_1"')
  558. self.assertNotContains(response, 'id="id_is_superuser_1"')
  559. response = self.client.post(
  560. test_link,
  561. data={
  562. 'username': 'Bawww',
  563. 'rank': six.text_type(test_user.rank_id),
  564. 'roles': six.text_type(test_user.roles.all()[0].pk),
  565. 'email': 'reg@stered.com',
  566. 'new_password': 'pass123',
  567. 'is_staff': '1',
  568. 'is_superuser': '1',
  569. 'signature': 'Hello world!',
  570. 'is_signature_locked': '1',
  571. 'is_hiding_presence': '0',
  572. 'limits_private_thread_invites_to': '0',
  573. 'signature_lock_staff_message': 'Staff message',
  574. 'signature_lock_user_message': 'User message',
  575. 'subscribe_to_started_threads': '2',
  576. 'subscribe_to_replied_threads': '2',
  577. }
  578. )
  579. self.assertEqual(response.status_code, 302)
  580. updated_user = UserModel.objects.get(pk=test_user.pk)
  581. self.assertFalse(updated_user.is_staff)
  582. self.assertFalse(updated_user.is_superuser)
  583. def test_edit_disable_user(self):
  584. """edit user view allows admin to disable non admin"""
  585. self.user.is_superuser = False
  586. self.user.save()
  587. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  588. test_link = reverse(
  589. 'misago:admin:users:accounts:edit', kwargs={
  590. 'pk': test_user.pk,
  591. }
  592. )
  593. response = self.client.get(test_link)
  594. self.assertContains(response, 'id="id_is_active_1"')
  595. self.assertContains(response, 'id="id_is_active_staff_message"')
  596. response = self.client.post(
  597. test_link,
  598. data={
  599. 'username': 'Bawww',
  600. 'rank': six.text_type(test_user.rank_id),
  601. 'roles': six.text_type(test_user.roles.all()[0].pk),
  602. 'email': 'reg@stered.com',
  603. 'new_password': 'pass123',
  604. 'is_staff': '0',
  605. 'is_superuser': '0',
  606. 'signature': 'Hello world!',
  607. 'is_signature_locked': '1',
  608. 'is_hiding_presence': '0',
  609. 'limits_private_thread_invites_to': '0',
  610. 'signature_lock_staff_message': 'Staff message',
  611. 'signature_lock_user_message': 'User message',
  612. 'subscribe_to_started_threads': '2',
  613. 'subscribe_to_replied_threads': '2',
  614. 'is_active': '0',
  615. 'is_active_staff_message': "Disabled in test!"
  616. }
  617. )
  618. self.assertEqual(response.status_code, 302)
  619. updated_user = UserModel.objects.get(pk=test_user.pk)
  620. self.assertFalse(updated_user.is_active)
  621. self.assertEqual(updated_user.is_active_staff_message, "Disabled in test!")
  622. def test_edit_superuser_disable_admin(self):
  623. """edit user view allows admin to disable non admin"""
  624. self.user.is_superuser = True
  625. self.user.save()
  626. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  627. test_user.is_staff = True
  628. test_user.save()
  629. test_link = reverse(
  630. 'misago:admin:users:accounts:edit', kwargs={
  631. 'pk': test_user.pk,
  632. }
  633. )
  634. response = self.client.get(test_link)
  635. self.assertContains(response, 'id="id_is_active_1"')
  636. self.assertContains(response, 'id="id_is_active_staff_message"')
  637. response = self.client.post(
  638. test_link,
  639. data={
  640. 'username': 'Bawww',
  641. 'rank': six.text_type(test_user.rank_id),
  642. 'roles': six.text_type(test_user.roles.all()[0].pk),
  643. 'email': 'reg@stered.com',
  644. 'new_password': 'pass123',
  645. 'is_staff': '1',
  646. 'is_superuser': '0',
  647. 'signature': 'Hello world!',
  648. 'is_signature_locked': '1',
  649. 'is_hiding_presence': '0',
  650. 'limits_private_thread_invites_to': '0',
  651. 'signature_lock_staff_message': 'Staff message',
  652. 'signature_lock_user_message': 'User message',
  653. 'subscribe_to_started_threads': '2',
  654. 'subscribe_to_replied_threads': '2',
  655. 'is_active': '0',
  656. 'is_active_staff_message': "Disabled in test!"
  657. }
  658. )
  659. self.assertEqual(response.status_code, 302)
  660. updated_user = UserModel.objects.get(pk=test_user.pk)
  661. self.assertFalse(updated_user.is_active)
  662. self.assertEqual(updated_user.is_active_staff_message, "Disabled in test!")
  663. def test_edit_admin_cant_disable_admin(self):
  664. """edit user view disallows admin to disable admin"""
  665. self.user.is_superuser = False
  666. self.user.save()
  667. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  668. test_user.is_staff = True
  669. test_user.save()
  670. test_link = reverse(
  671. 'misago:admin:users:accounts:edit', kwargs={
  672. 'pk': test_user.pk,
  673. }
  674. )
  675. response = self.client.get(test_link)
  676. self.assertNotContains(response, 'id="id_is_active_1"')
  677. self.assertNotContains(response, 'id="id_is_active_staff_message"')
  678. response = self.client.post(
  679. test_link,
  680. data={
  681. 'username': 'Bawww',
  682. 'rank': six.text_type(test_user.rank_id),
  683. 'roles': six.text_type(test_user.roles.all()[0].pk),
  684. 'email': 'reg@stered.com',
  685. 'new_password': 'pass123',
  686. 'is_staff': '1',
  687. 'is_superuser': '0',
  688. 'signature': 'Hello world!',
  689. 'is_signature_locked': '1',
  690. 'is_hiding_presence': '0',
  691. 'limits_private_thread_invites_to': '0',
  692. 'signature_lock_staff_message': 'Staff message',
  693. 'signature_lock_user_message': 'User message',
  694. 'subscribe_to_started_threads': '2',
  695. 'subscribe_to_replied_threads': '2',
  696. 'is_active': '0',
  697. 'is_active_staff_message': "Disabled in test!"
  698. }
  699. )
  700. self.assertEqual(response.status_code, 302)
  701. updated_user = UserModel.objects.get(pk=test_user.pk)
  702. self.assertTrue(updated_user.is_active)
  703. self.assertFalse(updated_user.is_active_staff_message)
  704. def test_delete_threads_view_self(self):
  705. """delete user threads view validates if user deletes self"""
  706. test_link = reverse(
  707. 'misago:admin:users:accounts:delete-threads', kwargs={
  708. 'pk': self.user.pk,
  709. }
  710. )
  711. response = self.client.post(test_link, **self.AJAX_HEADER)
  712. self.assertEqual(response.status_code, 302)
  713. response = self.client.get(reverse('misago:admin:index'))
  714. self.assertContains(response, "delete yourself");
  715. def test_delete_threads_view_staff(self):
  716. """delete user threads view validates if user deletes staff"""
  717. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  718. test_user.is_staff = True
  719. test_user.save()
  720. test_link = reverse(
  721. 'misago:admin:users:accounts:delete-threads', kwargs={
  722. 'pk': test_user.pk,
  723. }
  724. )
  725. response = self.client.post(test_link, **self.AJAX_HEADER)
  726. self.assertEqual(response.status_code, 302)
  727. response = self.client.get(reverse('misago:admin:index'))
  728. self.assertContains(response, "is admin and");
  729. def test_delete_threads_view_superuser(self):
  730. """delete user threads view validates if user deletes superuser"""
  731. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  732. test_user.is_superuser = True
  733. test_user.save()
  734. test_link = reverse(
  735. 'misago:admin:users:accounts:delete-threads', kwargs={
  736. 'pk': test_user.pk,
  737. }
  738. )
  739. response = self.client.post(test_link, **self.AJAX_HEADER)
  740. self.assertEqual(response.status_code, 302)
  741. response = self.client.get(reverse('misago:admin:index'))
  742. self.assertContains(response, "is admin and");
  743. def test_delete_threads_view(self):
  744. """delete user threads view deletes threads"""
  745. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  746. test_link = reverse(
  747. 'misago:admin:users:accounts:delete-threads', kwargs={
  748. 'pk': test_user.pk,
  749. }
  750. )
  751. category = Category.objects.all_categories()[:1][0]
  752. [post_thread(category, poster=test_user) for _ in range(10)]
  753. response = self.client.post(test_link, **self.AJAX_HEADER)
  754. self.assertEqual(response.status_code, 200)
  755. response_dict = response.json()
  756. self.assertEqual(response_dict['deleted_count'], 10)
  757. self.assertFalse(response_dict['is_completed'])
  758. response = self.client.post(test_link, **self.AJAX_HEADER)
  759. self.assertEqual(response.status_code, 200)
  760. response_dict = response.json()
  761. self.assertEqual(response_dict['deleted_count'], 0)
  762. self.assertTrue(response_dict['is_completed'])
  763. def test_delete_posts_view_self(self):
  764. """delete user posts view validates if user deletes self"""
  765. test_link = reverse(
  766. 'misago:admin:users:accounts:delete-posts', kwargs={
  767. 'pk': self.user.pk,
  768. }
  769. )
  770. response = self.client.post(test_link, **self.AJAX_HEADER)
  771. self.assertEqual(response.status_code, 302)
  772. response = self.client.get(reverse('misago:admin:index'))
  773. self.assertContains(response, "delete yourself");
  774. def test_delete_posts_view_staff(self):
  775. """delete user posts view validates if user deletes staff"""
  776. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  777. test_user.is_staff = True
  778. test_user.save()
  779. test_link = reverse(
  780. 'misago:admin:users:accounts:delete-posts', kwargs={
  781. 'pk': test_user.pk,
  782. }
  783. )
  784. response = self.client.post(test_link, **self.AJAX_HEADER)
  785. self.assertEqual(response.status_code, 302)
  786. response = self.client.get(reverse('misago:admin:index'))
  787. self.assertContains(response, "is admin and");
  788. def test_delete_posts_view_superuser(self):
  789. """delete user posts view validates if user deletes superuser"""
  790. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  791. test_user.is_superuser = True
  792. test_user.save()
  793. test_link = reverse(
  794. 'misago:admin:users:accounts:delete-posts', kwargs={
  795. 'pk': test_user.pk,
  796. }
  797. )
  798. response = self.client.post(test_link, **self.AJAX_HEADER)
  799. self.assertEqual(response.status_code, 302)
  800. response = self.client.get(reverse('misago:admin:index'))
  801. self.assertContains(response, "is admin and");
  802. def test_delete_posts_view(self):
  803. """delete user posts view deletes posts"""
  804. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  805. test_link = reverse(
  806. 'misago:admin:users:accounts:delete-posts', kwargs={
  807. 'pk': test_user.pk,
  808. }
  809. )
  810. category = Category.objects.all_categories()[:1][0]
  811. thread = post_thread(category)
  812. [reply_thread(thread, poster=test_user) for _ in range(10)]
  813. response = self.client.post(test_link, **self.AJAX_HEADER)
  814. self.assertEqual(response.status_code, 200)
  815. response_dict = response.json()
  816. self.assertEqual(response_dict['deleted_count'], 10)
  817. self.assertFalse(response_dict['is_completed'])
  818. response = self.client.post(test_link, **self.AJAX_HEADER)
  819. self.assertEqual(response.status_code, 200)
  820. response_dict = response.json()
  821. self.assertEqual(response_dict['deleted_count'], 0)
  822. self.assertTrue(response_dict['is_completed'])
  823. def test_delete_account_view_self(self):
  824. """delete user account view validates if user deletes self"""
  825. test_link = reverse(
  826. 'misago:admin:users:accounts:delete-account', kwargs={
  827. 'pk': self.user.pk,
  828. }
  829. )
  830. response = self.client.post(test_link, **self.AJAX_HEADER)
  831. self.assertEqual(response.status_code, 302)
  832. response = self.client.get(reverse('misago:admin:index'))
  833. self.assertContains(response, "delete yourself");
  834. def test_delete_account_view_staff(self):
  835. """delete user account view validates if user deletes staff"""
  836. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  837. test_user.is_staff = True
  838. test_user.save()
  839. test_link = reverse(
  840. 'misago:admin:users:accounts:delete-account', kwargs={
  841. 'pk': test_user.pk,
  842. }
  843. )
  844. response = self.client.post(test_link, **self.AJAX_HEADER)
  845. self.assertEqual(response.status_code, 302)
  846. response = self.client.get(reverse('misago:admin:index'))
  847. self.assertContains(response, "is admin and");
  848. def test_delete_account_view_superuser(self):
  849. """delete user account view validates if user deletes superuser"""
  850. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  851. test_user.is_superuser = True
  852. test_user.save()
  853. test_link = reverse(
  854. 'misago:admin:users:accounts:delete-account', kwargs={
  855. 'pk': test_user.pk,
  856. }
  857. )
  858. response = self.client.post(test_link, **self.AJAX_HEADER)
  859. self.assertEqual(response.status_code, 302)
  860. response = self.client.get(reverse('misago:admin:index'))
  861. self.assertContains(response, "is admin and");
  862. def test_delete_account_view(self):
  863. """delete user account view deletes user account"""
  864. test_user = UserModel.objects.create_user('Bob', 'bob@test.com', 'pass123')
  865. test_link = reverse(
  866. 'misago:admin:users:accounts:delete-account', kwargs={
  867. 'pk': test_user.pk,
  868. }
  869. )
  870. response = self.client.post(test_link, **self.AJAX_HEADER)
  871. self.assertEqual(response.status_code, 200)
  872. response_dict = response.json()
  873. self.assertTrue(response_dict['is_completed'])