test_thread_start_api.py 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360
  1. # -*- coding: utf-8 -*-
  2. from __future__ import unicode_literals
  3. from django.urls import reverse
  4. from misago.acl.testutils import override_acl
  5. from misago.categories.models import THREADS_ROOT_NAME, Category
  6. from misago.users.testutils import AuthenticatedUserTestCase
  7. from ..models import Thread
  8. from ..threadtypes import trees_map
  9. class StartThreadTests(AuthenticatedUserTestCase):
  10. def setUp(self):
  11. super(StartThreadTests, self).setUp()
  12. threads_tree_id = trees_map.get_tree_id_for_root(THREADS_ROOT_NAME)
  13. self.category = Category.objects.get(slug='first-category')
  14. self.api_link = reverse('misago:api:thread-list')
  15. def override_acl(self, extra_acl=None):
  16. new_acl = self.user.acl
  17. new_acl['categories'][self.category.pk].update({
  18. 'can_see': 1,
  19. 'can_browse': 1,
  20. 'can_start_threads': 1,
  21. 'can_pin_threads': 0,
  22. 'can_close_threads': 0,
  23. 'can_hide_threads': 0,
  24. 'can_hide_own_threads': 0
  25. })
  26. if extra_acl:
  27. new_acl['categories'][self.category.pk].update(extra_acl)
  28. if 'can_see' in extra_acl and not extra_acl['can_see']:
  29. new_acl['visible_categories'].remove(self.category.pk)
  30. new_acl['browseable_categories'].remove(self.category.pk)
  31. if 'can_browse' in extra_acl and not extra_acl['can_browse']:
  32. new_acl['browseable_categories'].remove(self.category.pk)
  33. override_acl(self.user, new_acl)
  34. def test_cant_start_thread_as_guest(self):
  35. """user has to be authenticated to be able to post thread"""
  36. self.logout_user()
  37. response = self.client.post(self.api_link)
  38. self.assertEqual(response.status_code, 403)
  39. def test_cant_see(self):
  40. """has no permission to see selected category"""
  41. self.override_acl({'can_see': 0})
  42. response = self.client.post(self.api_link, {
  43. 'category': self.category.pk
  44. })
  45. self.assertContains(response, "Selected category is invalid.", status_code=400)
  46. def test_cant_browse(self):
  47. """has no permission to browse selected category"""
  48. self.override_acl({'can_browse': 0})
  49. response = self.client.post(self.api_link, {
  50. 'category': self.category.pk
  51. })
  52. self.assertContains(response, "Selected category is invalid.", status_code=400)
  53. def test_cant_start_thread(self):
  54. """permission to start thread in category is validated"""
  55. self.override_acl({'can_start_threads': 0})
  56. response = self.client.post(self.api_link, {
  57. 'category': self.category.pk
  58. })
  59. self.assertContains(response, "You don't have permission to start new threads", status_code=400)
  60. def test_cant_start_thread_in_locked_category(self):
  61. """can't post in closed category"""
  62. self.category.is_closed = True
  63. self.category.save()
  64. self.override_acl({'can_close_threads': 0})
  65. response = self.client.post(self.api_link, {
  66. 'category': self.category.pk
  67. })
  68. self.assertContains(response, "This category is closed.", status_code=400)
  69. def test_cant_start_thread_in_invalid_category(self):
  70. """can't post in invalid category"""
  71. self.category.is_closed = True
  72. self.category.save()
  73. self.override_acl({'can_close_threads': 0})
  74. response = self.client.post(self.api_link, {
  75. 'category': self.category.pk * 100000
  76. })
  77. self.assertContains(response, "Selected category doesn't exist", status_code=400)
  78. def test_empty_data(self):
  79. """no data sent handling has no showstoppers"""
  80. self.override_acl()
  81. response = self.client.post(self.api_link, data={})
  82. self.assertEqual(response.status_code, 400)
  83. self.assertEqual(response.json(), {
  84. 'category': [
  85. "You have to select category to post thread in."
  86. ],
  87. 'title':[
  88. "You have to enter thread title."
  89. ],
  90. 'post': [
  91. "You have to enter a message."
  92. ]
  93. })
  94. def test_title_is_validated(self):
  95. """title is validated"""
  96. self.override_acl()
  97. response = self.client.post(self.api_link, data={
  98. 'category': self.category.pk,
  99. 'title': "------",
  100. 'post': "Lorem ipsum dolor met, sit amet elit!",
  101. })
  102. self.assertEqual(response.status_code, 400)
  103. self.assertEqual(response.json(), {
  104. 'title': [
  105. "Thread title should contain alpha-numeric characters."
  106. ]
  107. })
  108. def test_post_is_validated(self):
  109. """post is validated"""
  110. self.override_acl()
  111. response = self.client.post(self.api_link, data={
  112. 'category': self.category.pk,
  113. 'title': "Lorem ipsum dolor met",
  114. 'post': "a",
  115. })
  116. self.assertEqual(response.status_code, 400)
  117. self.assertEqual(response.json(), {
  118. 'post': [
  119. "Posted message should be at least 5 characters long (it has 1)."
  120. ]
  121. })
  122. def test_can_start_thread(self):
  123. """endpoint creates new thread"""
  124. self.override_acl()
  125. response = self.client.post(self.api_link, data={
  126. 'category': self.category.pk,
  127. 'title': "Hello, I am test thread!",
  128. 'post': "Lorem ipsum dolor met!"
  129. })
  130. self.assertEqual(response.status_code, 200)
  131. thread = self.user.thread_set.all()[:1][0]
  132. response_json = response.json()
  133. self.assertEqual(response_json['url'], thread.get_absolute_url())
  134. self.override_acl()
  135. response = self.client.get(thread.get_absolute_url())
  136. self.assertContains(response, self.category.name)
  137. self.assertContains(response, thread.title)
  138. self.assertContains(response, "<p>Lorem ipsum dolor met!</p>")
  139. self.reload_user()
  140. self.assertEqual(self.user.threads, 1)
  141. self.assertEqual(self.user.posts, 1)
  142. self.assertEqual(thread.category_id, self.category.pk)
  143. self.assertEqual(thread.title, "Hello, I am test thread!")
  144. self.assertEqual(thread.starter_id, self.user.id)
  145. self.assertEqual(thread.starter_name, self.user.username)
  146. self.assertEqual(thread.starter_slug, self.user.slug)
  147. self.assertEqual(thread.last_poster_id, self.user.id)
  148. self.assertEqual(thread.last_poster_name, self.user.username)
  149. self.assertEqual(thread.last_poster_slug, self.user.slug)
  150. post = self.user.post_set.all()[:1][0]
  151. self.assertEqual(post.category_id, self.category.pk)
  152. self.assertEqual(post.original, 'Lorem ipsum dolor met!')
  153. self.assertEqual(post.poster_id, self.user.id)
  154. self.assertEqual(post.poster_name, self.user.username)
  155. category = Category.objects.get(pk=self.category.pk)
  156. self.assertEqual(category.threads, 1)
  157. self.assertEqual(category.posts, 1)
  158. self.assertEqual(category.last_thread_id, thread.id)
  159. self.assertEqual(category.last_thread_title, thread.title)
  160. self.assertEqual(category.last_thread_slug, thread.slug)
  161. self.assertEqual(category.last_poster_id, self.user.id)
  162. self.assertEqual(category.last_poster_name, self.user.username)
  163. self.assertEqual(category.last_poster_slug, self.user.slug)
  164. def test_start_closed_thread_no_permission(self):
  165. """permission is checked before thread is closed"""
  166. self.override_acl({'can_close_threads': 0})
  167. response = self.client.post(self.api_link, data={
  168. 'category': self.category.pk,
  169. 'title': "Hello, I am test thread!",
  170. 'post': "Lorem ipsum dolor met!",
  171. 'close': True
  172. })
  173. self.assertEqual(response.status_code, 200)
  174. thread = self.user.thread_set.all()[:1][0]
  175. self.assertFalse(thread.is_closed)
  176. def test_start_closed_thread(self):
  177. """can post closed thread"""
  178. self.override_acl({'can_close_threads': 1})
  179. response = self.client.post(self.api_link, data={
  180. 'category': self.category.pk,
  181. 'title': "Hello, I am test thread!",
  182. 'post': "Lorem ipsum dolor met!",
  183. 'close': True
  184. })
  185. self.assertEqual(response.status_code, 200)
  186. thread = self.user.thread_set.all()[:1][0]
  187. self.assertTrue(thread.is_closed)
  188. def test_start_unpinned_thread(self):
  189. """can post unpinned thread"""
  190. self.override_acl({'can_pin_threads': 1})
  191. response = self.client.post(self.api_link, data={
  192. 'category': self.category.pk,
  193. 'title': "Hello, I am test thread!",
  194. 'post': "Lorem ipsum dolor met!",
  195. 'pin': 0
  196. })
  197. self.assertEqual(response.status_code, 200)
  198. thread = self.user.thread_set.all()[:1][0]
  199. self.assertEqual(thread.weight, 0)
  200. def test_start_locally_pinned_thread(self):
  201. """can post locally pinned thread"""
  202. self.override_acl({'can_pin_threads': 1})
  203. response = self.client.post(self.api_link, data={
  204. 'category': self.category.pk,
  205. 'title': "Hello, I am test thread!",
  206. 'post': "Lorem ipsum dolor met!",
  207. 'pin': 1
  208. })
  209. self.assertEqual(response.status_code, 200)
  210. thread = self.user.thread_set.all()[:1][0]
  211. self.assertEqual(thread.weight, 1)
  212. def test_start_globally_pinned_thread(self):
  213. """can post globally pinned thread"""
  214. self.override_acl({'can_pin_threads': 2})
  215. response = self.client.post(self.api_link, data={
  216. 'category': self.category.pk,
  217. 'title': "Hello, I am test thread!",
  218. 'post': "Lorem ipsum dolor met!",
  219. 'pin': 2
  220. })
  221. self.assertEqual(response.status_code, 200)
  222. thread = self.user.thread_set.all()[:1][0]
  223. self.assertEqual(thread.weight, 2)
  224. def test_start_globally_pinned_thread_no_permission(self):
  225. """cant post globally pinned thread without permission"""
  226. self.override_acl({'can_pin_threads': 1})
  227. response = self.client.post(self.api_link, data={
  228. 'category': self.category.pk,
  229. 'title': "Hello, I am test thread!",
  230. 'post': "Lorem ipsum dolor met!",
  231. 'pin': 2
  232. })
  233. self.assertEqual(response.status_code, 200)
  234. thread = self.user.thread_set.all()[:1][0]
  235. self.assertEqual(thread.weight, 0)
  236. def test_start_locally_pinned_thread_no_permission(self):
  237. """cant post locally pinned thread without permission"""
  238. self.override_acl({'can_pin_threads': 0})
  239. response = self.client.post(self.api_link, data={
  240. 'category': self.category.pk,
  241. 'title': "Hello, I am test thread!",
  242. 'post': "Lorem ipsum dolor met!",
  243. 'pin': 1
  244. })
  245. self.assertEqual(response.status_code, 200)
  246. thread = self.user.thread_set.all()[:1][0]
  247. self.assertEqual(thread.weight, 0)
  248. def test_start_hidden_thread(self):
  249. """can post hidden thread"""
  250. self.override_acl({'can_hide_threads': 1})
  251. response = self.client.post(self.api_link, data={
  252. 'category': self.category.pk,
  253. 'title': "Hello, I am test thread!",
  254. 'post': "Lorem ipsum dolor met!",
  255. 'hide': 1
  256. })
  257. self.assertEqual(response.status_code, 200)
  258. thread = self.user.thread_set.all()[:1][0]
  259. self.assertTrue(thread.is_hidden)
  260. category = Category.objects.get(pk=self.category.pk)
  261. self.assertNotEqual(category.last_thread_id, thread.id)
  262. def test_start_hidden_thread_no_permission(self):
  263. """cant post hidden thread without permission"""
  264. self.override_acl({'can_hide_threads': 0})
  265. response = self.client.post(self.api_link, data={
  266. 'category': self.category.pk,
  267. 'title': "Hello, I am test thread!",
  268. 'post': "Lorem ipsum dolor met!",
  269. 'hide': 1
  270. })
  271. self.assertEqual(response.status_code, 200)
  272. thread = self.user.thread_set.all()[:1][0]
  273. self.assertFalse(thread.is_hidden)
  274. def test_post_unicode(self):
  275. """unicode characters can be posted"""
  276. self.override_acl()
  277. response = self.client.post(self.api_link, data={
  278. 'category': self.category.pk,
  279. 'title': "Brzęczyżczykiewicz",
  280. 'post': "Chrzążczyżewoszyce, powiat Łękółody."
  281. })
  282. self.assertEqual(response.status_code, 200)