test_thread_start_api.py 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361
  1. # -*- coding: utf-8 -*-
  2. from __future__ import unicode_literals
  3. from django.urls import reverse
  4. from misago.acl.testutils import override_acl
  5. from misago.categories.models import THREADS_ROOT_NAME, Category
  6. from misago.users.testutils import AuthenticatedUserTestCase
  7. from ..models import Thread
  8. from ..threadtypes import trees_map
  9. class StartThreadTests(AuthenticatedUserTestCase):
  10. def setUp(self):
  11. super(StartThreadTests, self).setUp()
  12. threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
  13. self.category = Category.objects.get(slug='first-category')
  14. self.api_link = reverse('misago:api:thread-list')
  15. def override_acl(self, extra_acl=None):
  16. new_acl = self.user.acl
  17. new_acl['categories'][self.category.pk].update({
  18. 'can_see': 1,
  19. 'can_browse': 1,
  20. 'can_start_threads': 1,
  21. 'can_pin_threads': 0,
  22. 'can_close_threads': 0,
  23. 'can_hide_threads': 0,
  24. 'can_hide_own_threads': 0
  25. })
  26. if extra_acl:
  27. new_acl['categories'][self.category.pk].update(extra_acl)
  28. if 'can_see' in extra_acl and not extra_acl['can_see']:
  29. new_acl['visible_categories'].remove(self.category.pk)
  30. new_acl['browseable_categories'].remove(self.category.pk)
  31. if 'can_browse' in extra_acl and not extra_acl['can_browse']:
  32. new_acl['browseable_categories'].remove(self.category.pk)
  33. override_acl(self.user, new_acl)
  34. def test_cant_start_thread_as_guest(self):
  35. """user has to be authenticated to be able to post thread"""
  36. self.logout_user()
  37. response = self.client.post(self.api_link)
  38. self.assertEqual(response.status_code, 403)
  39. def test_cant_see(self):
  40. """has no permission to see selected category"""
  41. self.override_acl({'can_see': 0})
  42. response = self.client.post(self.api_link, {
  43. 'category': self.category.pk
  44. })
  45. self.assertContains(response, "Selected category is invalid.", status_code=400)
  46. def test_cant_browse(self):
  47. """has no permission to browse selected category"""
  48. self.override_acl({'can_browse': 0})
  49. response = self.client.post(self.api_link, {
  50. 'category': self.category.pk
  51. })
  52. self.assertContains(response, "Selected category is invalid.", status_code=400)
  53. def test_cant_start_thread(self):
  54. """permission to start thread in category is validated"""
  55. self.override_acl({'can_start_threads': 0})
  56. response = self.client.post(self.api_link, {
  57. 'category': self.category.pk
  58. })
  59. self.assertContains(response, "You don't have permission to start new threads", status_code=400)
  60. def test_cant_start_thread_in_locked_category(self):
  61. """can't post in closed category"""
  62. self.category.is_closed = True
  63. self.category.save()
  64. self.override_acl({'can_close_threads': 0})
  65. response = self.client.post(self.api_link, {
  66. 'category': self.category.pk
  67. })
  68. self.assertContains(response, "This category is closed.", status_code=400)
  69. def test_cant_start_thread_in_invalid_category(self):
  70. """can't post in invalid category"""
  71. self.category.is_closed = True
  72. self.category.save()
  73. self.override_acl({'can_close_threads': 0})
  74. response = self.client.post(self.api_link, {
  75. 'category': self.category.pk * 100000
  76. })
  77. self.assertContains(response, "Selected category doesn't exist", status_code=400)
  78. def test_empty_data(self):
  79. """no data sent handling has no showstoppers"""
  80. self.override_acl()
  81. response = self.client.post(self.api_link, data={})
  82. self.assertEqual(response.status_code, 400)
  83. self.assertEqual(response.json(), {
  84. 'category': [
  85. "You have to select category to post thread in."
  86. ],
  87. 'title':[
  88. "You have to enter thread title."
  89. ],
  90. 'post': [
  91. "You have to enter a message."
  92. ]
  93. })
  94. def test_title_is_validated(self):
  95. """title is validated"""
  96. self.override_acl()
  97. response = self.client.post(self.api_link, data={
  98. 'category': self.category.pk,
  99. 'title': "------",
  100. 'post': "Lorem ipsum dolor met, sit amet elit!",
  101. })
  102. self.assertEqual(response.status_code, 400)
  103. self.assertEqual(response.json(), {
  104. 'title': [
  105. "Thread title should contain alpha-numeric characters."
  106. ]
  107. })
  108. def test_post_is_validated(self):
  109. """post is validated"""
  110. self.override_acl()
  111. response = self.client.post(self.api_link, data={
  112. 'category': self.category.pk,
  113. 'title': "Lorem ipsum dolor met",
  114. 'post': "a",
  115. })
  116. self.assertEqual(response.status_code, 400)
  117. self.assertEqual(response.json(), {
  118. 'post': [
  119. "Posted message should be at least 5 characters long (it has 1)."
  120. ]
  121. })
  122. def test_can_start_thread(self):
  123. """endpoint creates new thread"""
  124. self.override_acl()
  125. response = self.client.post(self.api_link, data={
  126. 'category': self.category.pk,
  127. 'title': "Hello, I am test thread!",
  128. 'post': "Lorem ipsum dolor met!"
  129. })
  130. self.assertEqual(response.status_code, 200)
  131. thread = self.user.thread_set.all()[:1][0]
  132. response_json = response.json()
  133. self.assertEqual(response_json['url'], thread.get_absolute_url())
  134. self.override_acl()
  135. response = self.client.get(thread.get_absolute_url())
  136. self.assertContains(response, self.category.name)
  137. self.assertContains(response, thread.title)
  138. self.assertContains(response, "<p>Lorem ipsum dolor met!</p>")
  139. # api increased user's threads and posts counts
  140. self.reload_user()
  141. self.assertEqual(self.user.threads, 1)
  142. self.assertEqual(self.user.posts, 1)
  143. self.assertEqual(thread.category_id, self.category.pk)
  144. self.assertEqual(thread.title, "Hello, I am test thread!")
  145. self.assertEqual(thread.starter_id, self.user.id)
  146. self.assertEqual(thread.starter_name, self.user.username)
  147. self.assertEqual(thread.starter_slug, self.user.slug)
  148. self.assertEqual(thread.last_poster_id, self.user.id)
  149. self.assertEqual(thread.last_poster_name, self.user.username)
  150. self.assertEqual(thread.last_poster_slug, self.user.slug)
  151. post = self.user.post_set.all()[:1][0]
  152. self.assertEqual(post.category_id, self.category.pk)
  153. self.assertEqual(post.original, 'Lorem ipsum dolor met!')
  154. self.assertEqual(post.poster_id, self.user.id)
  155. self.assertEqual(post.poster_name, self.user.username)
  156. category = Category.objects.get(pk=self.category.pk)
  157. self.assertEqual(category.threads, 1)
  158. self.assertEqual(category.posts, 1)
  159. self.assertEqual(category.last_thread_id, thread.id)
  160. self.assertEqual(category.last_thread_title, thread.title)
  161. self.assertEqual(category.last_thread_slug, thread.slug)
  162. self.assertEqual(category.last_poster_id, self.user.id)
  163. self.assertEqual(category.last_poster_name, self.user.username)
  164. self.assertEqual(category.last_poster_slug, self.user.slug)
  165. def test_start_closed_thread_no_permission(self):
  166. """permission is checked before thread is closed"""
  167. self.override_acl({'can_close_threads': 0})
  168. response = self.client.post(self.api_link, data={
  169. 'category': self.category.pk,
  170. 'title': "Hello, I am test thread!",
  171. 'post': "Lorem ipsum dolor met!",
  172. 'close': True
  173. })
  174. self.assertEqual(response.status_code, 200)
  175. thread = self.user.thread_set.all()[:1][0]
  176. self.assertFalse(thread.is_closed)
  177. def test_start_closed_thread(self):
  178. """can post closed thread"""
  179. self.override_acl({'can_close_threads': 1})
  180. response = self.client.post(self.api_link, data={
  181. 'category': self.category.pk,
  182. 'title': "Hello, I am test thread!",
  183. 'post': "Lorem ipsum dolor met!",
  184. 'close': True
  185. })
  186. self.assertEqual(response.status_code, 200)
  187. thread = self.user.thread_set.all()[:1][0]
  188. self.assertTrue(thread.is_closed)
  189. def test_start_unpinned_thread(self):
  190. """can post unpinned thread"""
  191. self.override_acl({'can_pin_threads': 1})
  192. response = self.client.post(self.api_link, data={
  193. 'category': self.category.pk,
  194. 'title': "Hello, I am test thread!",
  195. 'post': "Lorem ipsum dolor met!",
  196. 'pin': 0
  197. })
  198. self.assertEqual(response.status_code, 200)
  199. thread = self.user.thread_set.all()[:1][0]
  200. self.assertEqual(thread.weight, 0)
  201. def test_start_locally_pinned_thread(self):
  202. """can post locally pinned thread"""
  203. self.override_acl({'can_pin_threads': 1})
  204. response = self.client.post(self.api_link, data={
  205. 'category': self.category.pk,
  206. 'title': "Hello, I am test thread!",
  207. 'post': "Lorem ipsum dolor met!",
  208. 'pin': 1
  209. })
  210. self.assertEqual(response.status_code, 200)
  211. thread = self.user.thread_set.all()[:1][0]
  212. self.assertEqual(thread.weight, 1)
  213. def test_start_globally_pinned_thread(self):
  214. """can post globally pinned thread"""
  215. self.override_acl({'can_pin_threads': 2})
  216. response = self.client.post(self.api_link, data={
  217. 'category': self.category.pk,
  218. 'title': "Hello, I am test thread!",
  219. 'post': "Lorem ipsum dolor met!",
  220. 'pin': 2
  221. })
  222. self.assertEqual(response.status_code, 200)
  223. thread = self.user.thread_set.all()[:1][0]
  224. self.assertEqual(thread.weight, 2)
  225. def test_start_globally_pinned_thread_no_permission(self):
  226. """cant post globally pinned thread without permission"""
  227. self.override_acl({'can_pin_threads': 1})
  228. response = self.client.post(self.api_link, data={
  229. 'category': self.category.pk,
  230. 'title': "Hello, I am test thread!",
  231. 'post': "Lorem ipsum dolor met!",
  232. 'pin': 2
  233. })
  234. self.assertEqual(response.status_code, 200)
  235. thread = self.user.thread_set.all()[:1][0]
  236. self.assertEqual(thread.weight, 0)
  237. def test_start_locally_pinned_thread_no_permission(self):
  238. """cant post locally pinned thread without permission"""
  239. self.override_acl({'can_pin_threads': 0})
  240. response = self.client.post(self.api_link, data={
  241. 'category': self.category.pk,
  242. 'title': "Hello, I am test thread!",
  243. 'post': "Lorem ipsum dolor met!",
  244. 'pin': 1
  245. })
  246. self.assertEqual(response.status_code, 200)
  247. thread = self.user.thread_set.all()[:1][0]
  248. self.assertEqual(thread.weight, 0)
  249. def test_start_hidden_thread(self):
  250. """can post hidden thread"""
  251. self.override_acl({'can_hide_threads': 1})
  252. response = self.client.post(self.api_link, data={
  253. 'category': self.category.pk,
  254. 'title': "Hello, I am test thread!",
  255. 'post': "Lorem ipsum dolor met!",
  256. 'hide': 1
  257. })
  258. self.assertEqual(response.status_code, 200)
  259. thread = self.user.thread_set.all()[:1][0]
  260. self.assertTrue(thread.is_hidden)
  261. category = Category.objects.get(pk=self.category.pk)
  262. self.assertNotEqual(category.last_thread_id, thread.id)
  263. def test_start_hidden_thread_no_permission(self):
  264. """cant post hidden thread without permission"""
  265. self.override_acl({'can_hide_threads': 0})
  266. response = self.client.post(self.api_link, data={
  267. 'category': self.category.pk,
  268. 'title': "Hello, I am test thread!",
  269. 'post': "Lorem ipsum dolor met!",
  270. 'hide': 1
  271. })
  272. self.assertEqual(response.status_code, 200)
  273. thread = self.user.thread_set.all()[:1][0]
  274. self.assertFalse(thread.is_hidden)
  275. def test_post_unicode(self):
  276. """unicode characters can be posted"""
  277. self.override_acl()
  278. response = self.client.post(self.api_link, data={
  279. 'category': self.category.pk,
  280. 'title': "Brzęczyżczykiewicz",
  281. 'post': "Chrzążczyżewoszyce, powiat Łękółody."
  282. })
  283. self.assertEqual(response.status_code, 200)