test_thread_start_api.py 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365
  1. # -*- coding: utf-8 -*-
  2. from __future__ import unicode_literals
  3. import json
  4. from django.conf import settings
  5. from django.utils.encoding import smart_str
  6. from misago.acl.testutils import override_acl
  7. from misago.categories.models import THREADS_ROOT_NAME, Category
  8. from misago.users.testutils import AuthenticatedUserTestCase
  9. from ..models import Thread
  10. from ..threadtypes import trees_map
  11. class StartThreadTests(AuthenticatedUserTestCase):
  12. def setUp(self):
  13. super(StartThreadTests, self).setUp()
  14. threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
  15. self.root = Category.objects.get(tree_id=threads_tree_id, level=0)
  16. self.category = Category.objects.get(slug='first-category')
  17. self.api_link = '/api/threads/'
  18. def override_acl(self, extra_acl=None):
  19. new_acl = self.user.acl
  20. new_acl['categories'][self.category.pk].update({
  21. 'can_see': 1,
  22. 'can_browse': 1,
  23. 'can_start_threads': 1,
  24. 'can_pin_threads': 0,
  25. 'can_close_threads': 0,
  26. 'can_hide_threads': 0,
  27. 'can_hide_own_threads': 0
  28. })
  29. if extra_acl:
  30. new_acl['categories'][self.category.pk].update(extra_acl)
  31. if 'can_see' in extra_acl and not extra_acl['can_see']:
  32. new_acl['visible_categories'].remove(self.category.pk)
  33. new_acl['browseable_categories'].remove(self.category.pk)
  34. if 'can_browse' in extra_acl and not extra_acl['can_browse']:
  35. new_acl['browseable_categories'].remove(self.category.pk)
  36. override_acl(self.user, new_acl)
  37. def test_cant_start_thread_as_guest(self):
  38. """user has to be authenticated to be able to post thread"""
  39. self.logout_user()
  40. response = self.client.post(self.api_link)
  41. self.assertEqual(response.status_code, 403)
  42. def test_cant_see(self):
  43. """has no permission to see selected category"""
  44. self.override_acl({'can_see': 0})
  45. response = self.client.post(self.api_link, {
  46. 'category': self.category.pk
  47. })
  48. self.assertContains(response, "Selected category is invalid.", status_code=400)
  49. def test_cant_browse(self):
  50. """has no permission to browse selected category"""
  51. self.override_acl({'can_browse': 0})
  52. response = self.client.post(self.api_link, {
  53. 'category': self.category.pk
  54. })
  55. self.assertContains(response, "Selected category is invalid.", status_code=400)
  56. def test_cant_start_thread(self):
  57. """permission to start thread in category is validated"""
  58. self.override_acl({'can_start_threads': 0})
  59. response = self.client.post(self.api_link, {
  60. 'category': self.category.pk
  61. })
  62. self.assertContains(response, "You don't have permission to start new threads", status_code=400)
  63. def test_cant_start_thread_in_locked_category(self):
  64. """can't post in closed category"""
  65. self.category.is_closed = True
  66. self.category.save()
  67. self.override_acl({'can_close_threads': 0})
  68. response = self.client.post(self.api_link, {
  69. 'category': self.category.pk
  70. })
  71. self.assertContains(response, "This category is closed.", status_code=400)
  72. def test_cant_start_thread_in_invalid_category(self):
  73. """can't post in invalid category"""
  74. self.category.is_closed = True
  75. self.category.save()
  76. self.override_acl({'can_close_threads': 0})
  77. response = self.client.post(self.api_link, {
  78. 'category': self.category.pk * 100000
  79. })
  80. self.assertContains(response, "Selected category doesn't exist", status_code=400)
  81. def test_empty_data(self):
  82. """no data sent handling has no showstoppers"""
  83. self.override_acl()
  84. response = self.client.post(self.api_link, data={})
  85. self.assertEqual(response.status_code, 400)
  86. self.assertEqual(json.loads(smart_str(response.content)), {
  87. 'category': [
  88. "You have to select category to post thread in."
  89. ],
  90. 'title':[
  91. "You have to enter thread title."
  92. ],
  93. 'post': [
  94. "You have to enter a message"
  95. ]
  96. })
  97. def test_title_is_validated(self):
  98. """title is validated"""
  99. self.override_acl()
  100. response = self.client.post(self.api_link, data={
  101. 'category': self.category.pk,
  102. 'title': '------',
  103. 'post': 'Lorem ipsum dolor met, sit amet elit!',
  104. })
  105. self.assertEqual(response.status_code, 400)
  106. self.assertEqual(json.loads(smart_str(response.content)), {
  107. 'title': [
  108. "Thread title should contain alpha-numeric characters."
  109. ]
  110. })
  111. def test_post_is_validated(self):
  112. """post is validated"""
  113. self.override_acl()
  114. response = self.client.post(self.api_link, data={
  115. 'category': self.category.pk,
  116. 'title': 'Lorem ipsum dolor met',
  117. 'post': 'a',
  118. })
  119. self.assertEqual(response.status_code, 400)
  120. self.assertEqual(json.loads(smart_str(response.content)), {
  121. 'post': [
  122. "Posted message should be at least 5 characters long (it has 1)."
  123. ]
  124. })
  125. def test_can_start_thread(self):
  126. """endpoint creates new thread"""
  127. self.override_acl()
  128. response = self.client.post(self.api_link, data={
  129. 'category': self.category.pk,
  130. 'title': "Hello, I am test thread!",
  131. 'post': "Lorem ipsum dolor met!"
  132. })
  133. self.assertEqual(response.status_code, 200)
  134. thread = self.user.thread_set.all()[:1][0]
  135. response_json = json.loads(smart_str(response.content))
  136. self.assertEqual(response_json['url'], thread.get_absolute_url())
  137. self.override_acl()
  138. response = self.client.get(thread.get_absolute_url())
  139. self.assertContains(response, self.category.name)
  140. self.assertContains(response, thread.title)
  141. self.assertContains(response, "<p>Lorem ipsum dolor met!</p>")
  142. self.reload_user()
  143. self.assertEqual(self.user.threads, 1)
  144. self.assertEqual(self.user.posts, 1)
  145. self.assertEqual(thread.category_id, self.category.pk)
  146. self.assertEqual(thread.title, "Hello, I am test thread!")
  147. self.assertEqual(thread.starter_id, self.user.id)
  148. self.assertEqual(thread.starter_name, self.user.username)
  149. self.assertEqual(thread.starter_slug, self.user.slug)
  150. self.assertEqual(thread.last_poster_id, self.user.id)
  151. self.assertEqual(thread.last_poster_name, self.user.username)
  152. self.assertEqual(thread.last_poster_slug, self.user.slug)
  153. post = self.user.post_set.all()[:1][0]
  154. self.assertEqual(post.category_id, self.category.pk)
  155. self.assertEqual(post.original, 'Lorem ipsum dolor met!')
  156. self.assertEqual(post.poster_id, self.user.id)
  157. self.assertEqual(post.poster_name, self.user.username)
  158. category = Category.objects.get(pk=self.category.pk)
  159. self.assertEqual(category.threads, 1)
  160. self.assertEqual(category.posts, 1)
  161. self.assertEqual(category.last_thread_id, thread.id)
  162. self.assertEqual(category.last_thread_title, thread.title)
  163. self.assertEqual(category.last_thread_slug, thread.slug)
  164. self.assertEqual(category.last_poster_id, self.user.id)
  165. self.assertEqual(category.last_poster_name, self.user.username)
  166. self.assertEqual(category.last_poster_slug, self.user.slug)
  167. def test_start_closed_thread_no_permission(self):
  168. """permission is checked before thread is closed"""
  169. self.override_acl({'can_close_threads': 0})
  170. response = self.client.post(self.api_link, data={
  171. 'category': self.category.pk,
  172. 'title': 'Hello, I am test thread!',
  173. 'post': 'Lorem ipsum dolor met!',
  174. 'close': True
  175. })
  176. self.assertEqual(response.status_code, 200)
  177. thread = self.user.thread_set.all()[:1][0]
  178. self.assertFalse(thread.is_closed)
  179. def test_start_closed_thread(self):
  180. """can post closed thread"""
  181. self.override_acl({'can_close_threads': 1})
  182. response = self.client.post(self.api_link, data={
  183. 'category': self.category.pk,
  184. 'title': 'Hello, I am test thread!',
  185. 'post': 'Lorem ipsum dolor met!',
  186. 'close': True
  187. })
  188. self.assertEqual(response.status_code, 200)
  189. thread = self.user.thread_set.all()[:1][0]
  190. self.assertTrue(thread.is_closed)
  191. def test_start_unpinned_thread(self):
  192. """can post unpinned thread"""
  193. self.override_acl({'can_pin_threads': 1})
  194. response = self.client.post(self.api_link, data={
  195. 'category': self.category.pk,
  196. 'title': 'Hello, I am test thread!',
  197. 'post': 'Lorem ipsum dolor met!',
  198. 'pin': 0
  199. })
  200. self.assertEqual(response.status_code, 200)
  201. thread = self.user.thread_set.all()[:1][0]
  202. self.assertEqual(thread.weight, 0)
  203. def test_start_locally_pinned_thread(self):
  204. """can post locally pinned thread"""
  205. self.override_acl({'can_pin_threads': 1})
  206. response = self.client.post(self.api_link, data={
  207. 'category': self.category.pk,
  208. 'title': 'Hello, I am test thread!',
  209. 'post': 'Lorem ipsum dolor met!',
  210. 'pin': 1
  211. })
  212. self.assertEqual(response.status_code, 200)
  213. thread = self.user.thread_set.all()[:1][0]
  214. self.assertEqual(thread.weight, 1)
  215. def test_start_globally_pinned_thread(self):
  216. """can post globally pinned thread"""
  217. self.override_acl({'can_pin_threads': 2})
  218. response = self.client.post(self.api_link, data={
  219. 'category': self.category.pk,
  220. 'title': 'Hello, I am test thread!',
  221. 'post': 'Lorem ipsum dolor met!',
  222. 'pin': 2
  223. })
  224. self.assertEqual(response.status_code, 200)
  225. thread = self.user.thread_set.all()[:1][0]
  226. self.assertEqual(thread.weight, 2)
  227. def test_start_globally_pinned_thread_no_permission(self):
  228. """cant post globally pinned thread without permission"""
  229. self.override_acl({'can_pin_threads': 1})
  230. response = self.client.post(self.api_link, data={
  231. 'category': self.category.pk,
  232. 'title': 'Hello, I am test thread!',
  233. 'post': 'Lorem ipsum dolor met!',
  234. 'pin': 2
  235. })
  236. self.assertEqual(response.status_code, 200)
  237. thread = self.user.thread_set.all()[:1][0]
  238. self.assertEqual(thread.weight, 0)
  239. def test_start_locally_pinned_thread_no_permission(self):
  240. """cant post locally pinned thread without permission"""
  241. self.override_acl({'can_pin_threads': 0})
  242. response = self.client.post(self.api_link, data={
  243. 'category': self.category.pk,
  244. 'title': 'Hello, I am test thread!',
  245. 'post': 'Lorem ipsum dolor met!',
  246. 'pin': 1
  247. })
  248. self.assertEqual(response.status_code, 200)
  249. thread = self.user.thread_set.all()[:1][0]
  250. self.assertEqual(thread.weight, 0)
  251. def test_start_hidden_thread(self):
  252. """can post hidden thread"""
  253. self.override_acl({'can_hide_threads': 1})
  254. response = self.client.post(self.api_link, data={
  255. 'category': self.category.pk,
  256. 'title': 'Hello, I am test thread!',
  257. 'post': 'Lorem ipsum dolor met!',
  258. 'hide': 1
  259. })
  260. self.assertEqual(response.status_code, 200)
  261. thread = self.user.thread_set.all()[:1][0]
  262. self.assertTrue(thread.is_hidden)
  263. category = Category.objects.get(pk=self.category.pk)
  264. self.assertNotEqual(category.last_thread_id, thread.id)
  265. def test_start_hidden_thread_no_permission(self):
  266. """cant post hidden thread without permission"""
  267. self.override_acl({'can_hide_threads': 0})
  268. response = self.client.post(self.api_link, data={
  269. 'category': self.category.pk,
  270. 'title': 'Hello, I am test thread!',
  271. 'post': 'Lorem ipsum dolor met!',
  272. 'hide': 1
  273. })
  274. self.assertEqual(response.status_code, 200)
  275. thread = self.user.thread_set.all()[:1][0]
  276. self.assertFalse(thread.is_hidden)
  277. def test_post_unicode(self):
  278. """unicode characters can be posted"""
  279. self.override_acl()
  280. response = self.client.post(self.api_link, data={
  281. 'category': self.category.pk,
  282. 'title': 'Brzęczyżczykiewicz',
  283. 'post': 'Chrzążczyżewoszyce, powiat Łękółody.'
  284. })
  285. self.assertEqual(response.status_code, 200)