test_moderation_views.py 9.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267
  1. from django.contrib.auth import get_user_model
  2. from django.core.urlresolvers import reverse
  3. from misago.acl.testutils import override_acl
  4. from misago.admin.testutils import AdminTestCase
  5. from misago.users.models import Ban
  6. class UserModerationTestCase(AdminTestCase):
  7. def setUp(self):
  8. super(UserModerationTestCase, self).setUp()
  9. self.test_user = get_user_model().objects.create_user(
  10. "Bob", "bob@bob.com", "Pass.123")
  11. self.link_kwargs = {'user_slug': 'bob', 'user_id': self.test_user.pk}
  12. class RenameUserTests(UserModerationTestCase):
  13. def allow_rename(self):
  14. override_acl(self.test_admin, {
  15. 'can_rename_users': 1,
  16. })
  17. def test_no_rename_permission(self):
  18. """user with no permission fails to rename other user"""
  19. override_acl(self.test_admin, {
  20. 'can_rename_users': 0,
  21. })
  22. response = self.client.get(
  23. reverse('misago:rename_user', kwargs=self.link_kwargs))
  24. self.assertEqual(response.status_code, 403)
  25. self.assertIn("You can't rename users.", response.content)
  26. def test_rename_user(self):
  27. """user with permission renames other user"""
  28. self.allow_rename()
  29. response = self.client.get(
  30. reverse('misago:rename_user', kwargs=self.link_kwargs))
  31. self.assertEqual(response.status_code, 200)
  32. self.allow_rename()
  33. response = self.client.post(
  34. reverse('misago:rename_user', kwargs=self.link_kwargs),
  35. data={'new_username': 'LoremIpsum'})
  36. self.assertEqual(response.status_code, 302)
  37. self.allow_rename()
  38. response = self.client.post(reverse('misago:index'))
  39. self.assertEqual(response.status_code, 200)
  40. self.assertIn('Bob's username has been changed.', response.content)
  41. class ModerateAvatarTests(UserModerationTestCase):
  42. def allow_avatar_mod(self):
  43. override_acl(self.test_admin, {
  44. 'can_moderate_avatars': 1,
  45. })
  46. def test_no_avatar_mod_permission(self):
  47. """user with no permission fails to mod other user avatar"""
  48. override_acl(self.test_admin, {
  49. 'can_moderate_avatars': 0,
  50. })
  51. response = self.client.get(
  52. reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
  53. self.assertEqual(response.status_code, 403)
  54. self.assertIn("You can't moderate avatars.", response.content)
  55. def test_mod_avatar(self):
  56. """user with permission moderates other user avatar"""
  57. self.allow_avatar_mod()
  58. response = self.client.get(
  59. reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
  60. self.assertEqual(response.status_code, 200)
  61. self.allow_avatar_mod()
  62. response = self.client.post(
  63. reverse('misago:moderate_avatar', kwargs=self.link_kwargs),
  64. data={
  65. 'is_avatar_locked': '1',
  66. 'avatar_lock_user_message': 'Test us3r message',
  67. 'avatar_lock_staff_message': 'Test st4ff message'
  68. })
  69. self.assertEqual(response.status_code, 302)
  70. User = get_user_model()
  71. updated_user = User.objects.get(id=self.test_user.pk)
  72. self.assertTrue(updated_user.is_avatar_locked)
  73. self.assertEqual(updated_user.avatar_lock_user_message,
  74. 'Test us3r message')
  75. self.assertEqual(updated_user.avatar_lock_staff_message,
  76. 'Test st4ff message')
  77. self.allow_avatar_mod()
  78. response = self.client.get(
  79. reverse('misago:moderate_avatar', kwargs=self.link_kwargs))
  80. self.assertEqual(response.status_code, 200)
  81. self.assertIn('Test us3r message', response.content)
  82. self.assertIn('Test st4ff message', response.content)
  83. class ModerateSignatureTests(UserModerationTestCase):
  84. def allow_signature_mod(self):
  85. override_acl(self.test_admin, {
  86. 'can_moderate_signatures': 1,
  87. })
  88. def test_no_signature_mod_permission(self):
  89. """user with no permission fails to mod other user signature"""
  90. override_acl(self.test_admin, {
  91. 'can_moderate_signatures': 0,
  92. })
  93. response = self.client.get(
  94. reverse('misago:moderate_signature', kwargs=self.link_kwargs))
  95. self.assertEqual(response.status_code, 403)
  96. self.assertIn("You can't moderate signatures.", response.content)
  97. def test_mod_signature(self):
  98. """user with permission moderates other user signature"""
  99. self.allow_signature_mod()
  100. response = self.client.get(
  101. reverse('misago:moderate_signature', kwargs=self.link_kwargs))
  102. self.assertEqual(response.status_code, 200)
  103. self.allow_signature_mod()
  104. response = self.client.post(
  105. reverse('misago:moderate_signature', kwargs=self.link_kwargs),
  106. data={
  107. 'signature': 'kittens!',
  108. 'is_signature_locked': '1',
  109. 'signature_lock_user_message': 'Test us3r message',
  110. 'signature_lock_staff_message': 'Test st4ff message'
  111. })
  112. self.assertEqual(response.status_code, 302)
  113. User = get_user_model()
  114. updated_user = User.objects.get(id=self.test_user.pk)
  115. self.assertTrue(updated_user.is_signature_locked)
  116. self.assertEqual(updated_user.signature_parsed, '<p>kittens!</p>')
  117. self.assertEqual(updated_user.signature_lock_user_message,
  118. 'Test us3r message')
  119. self.assertEqual(updated_user.signature_lock_staff_message,
  120. 'Test st4ff message')
  121. self.allow_signature_mod()
  122. response = self.client.get(
  123. reverse('misago:moderate_signature', kwargs=self.link_kwargs))
  124. self.assertEqual(response.status_code, 200)
  125. self.assertIn('Test us3r message', response.content)
  126. self.assertIn('Test st4ff message', response.content)
  127. class BanUserTests(UserModerationTestCase):
  128. def allow_ban_user(self):
  129. override_acl(self.test_admin, {
  130. 'can_ban_users': 1,
  131. 'max_ban_length': 0,
  132. })
  133. def test_no_ban_permission(self):
  134. """user with no permission fails to ban other user"""
  135. override_acl(self.test_admin, {
  136. 'can_ban_users': 0,
  137. })
  138. response = self.client.get(
  139. reverse('misago:ban_user', kwargs=self.link_kwargs))
  140. self.assertEqual(response.status_code, 403)
  141. self.assertIn("You can&#39;t ban users.", response.content)
  142. def test_ban_user(self):
  143. """user with permission bans other user"""
  144. self.allow_ban_user()
  145. response = self.client.get(
  146. reverse('misago:ban_user', kwargs=self.link_kwargs))
  147. self.assertEqual(response.status_code, 200)
  148. self.allow_ban_user()
  149. response = self.client.post(
  150. reverse('misago:ban_user', kwargs=self.link_kwargs))
  151. self.assertEqual(response.status_code, 302)
  152. self.allow_ban_user()
  153. response = self.client.post(reverse('misago:index'))
  154. self.assertEqual(response.status_code, 200)
  155. self.assertIn('Bob has been banned.', response.content)
  156. Ban.objects.get(banned_value=self.test_user.username.lower())
  157. class LiftUserBanTests(UserModerationTestCase):
  158. def allow_lift_ban(self):
  159. override_acl(self.test_admin, {
  160. 'can_lift_bans': 1,
  161. 'max_lifted_ban_length': 0,
  162. })
  163. def test_no_lift_ban_permission(self):
  164. """user with no permission fails to lift user ban"""
  165. override_acl(self.test_admin, {
  166. 'can_lift_bans': 0,
  167. 'max_lifted_ban_length': 0,
  168. })
  169. Ban.objects.create(banned_value=self.test_user.username)
  170. response = self.client.post(
  171. reverse('misago:lift_user_ban', kwargs=self.link_kwargs))
  172. self.assertEqual(response.status_code, 403)
  173. self.assertIn("You can&#39;t lift bans.", response.content)
  174. def test_lift_user_ban(self):
  175. """user with permission lifts other user ban"""
  176. test_ban = Ban.objects.create(banned_value=self.test_user.username)
  177. self.allow_lift_ban()
  178. response = self.client.post(
  179. reverse('misago:lift_user_ban', kwargs=self.link_kwargs))
  180. self.assertEqual(response.status_code, 302)
  181. self.allow_lift_ban()
  182. response = self.client.post(reverse('misago:index'))
  183. self.assertEqual(response.status_code, 200)
  184. self.assertIn('ban has been lifted.', response.content)
  185. test_ban = Ban.objects.get(id=test_ban.pk)
  186. self.assertTrue(test_ban.is_expired)
  187. class DeleteUserTests(UserModerationTestCase):
  188. def test_no_delete_permission(self):
  189. """user with no permission fails to delete other user"""
  190. override_acl(self.test_admin, {
  191. 'can_delete_users_newer_than': 0,
  192. 'can_delete_users_with_less_posts_than': 0,
  193. })
  194. response = self.client.post(
  195. reverse('misago:delete_user', kwargs=self.link_kwargs))
  196. self.assertEqual(response.status_code, 403)
  197. self.assertIn("You can&#39;t delete users.", response.content)
  198. def test_delete_user(self):
  199. """user with permission deletes other user"""
  200. override_acl(self.test_admin, {
  201. 'can_delete_users_newer_than': 5,
  202. 'can_delete_users_with_less_posts_than': 5,
  203. })
  204. response = self.client.post(
  205. reverse('misago:delete_user', kwargs=self.link_kwargs))
  206. self.assertEqual(response.status_code, 302)
  207. response = self.client.post(reverse('misago:index'))
  208. self.assertEqual(response.status_code, 200)
  209. self.assertIn('Bob has been deleted', response.content)