Misago/misago/users/tests/test_usernamechanges_api.py

from misago.acl.test import patch_user_acl
from misago.users.test import AuthenticatedUserTestCase


class UsernameChangesApiTests(AuthenticatedUserTestCase):
    def setUp(self):
        super().setUp()
        self.link = "/api/username-changes/"

    @patch_user_acl({"can_see_users_name_history": False})
    def test_user_can_always_see_his_name_changes(self):
        """list returns own username changes"""
        self.user.set_username("NewUsername", self.user)
        response = self.client.get("%s?user=%s" % (self.link, self.user.pk))
        self.assertEqual(response.status_code, 200)
        self.assertContains(response, self.user.username)

    @patch_user_acl({"can_see_users_name_history": True})
    def test_list_handles_invalid_filter(self):
        """list raises 404 for invalid filter"""
        self.user.set_username("NewUsername", self.user)
        response = self.client.get("%s?user=abcd" % self.link)
        self.assertEqual(response.status_code, 404)

    @patch_user_acl({"can_see_users_name_history": True})
    def test_list_handles_nonexisting_user(self):
        """list raises 404 for invalid user id"""
        self.user.set_username("NewUsername", self.user)
        response = self.client.get("%s?user=142141" % self.link)
        self.assertEqual(response.status_code, 404)

    @patch_user_acl({"can_see_users_name_history": False})
    def test_list_handles_search(self):
        """list returns found username changes"""
        self.user.set_username("NewUsername", self.user)

        response = self.client.get("%s?user=%s&search=new" % (self.link, self.user.pk))
        self.assertEqual(response.status_code, 200)
        self.assertContains(response, self.user.username)

        response = self.client.get(
            "%s?user=%s&search=usernew" % (self.link, self.user.pk)
        )
        self.assertEqual(response.status_code, 200)
        self.assertEqual(response.json()["count"], 0)

    @patch_user_acl({"can_see_users_name_history": False})
    def test_list_denies_permission(self):
        """list denies permission for other user (or all) if no access"""
        response = self.client.get("%s?user=%s" % (self.link, self.user.pk + 1))
        self.assertEqual(response.status_code, 403)
        self.assertEqual(
            response.json(),
            {"detail": "You don't have permission to see other users name history."},
        )

        response = self.client.get(self.link)
        self.assertEqual(response.status_code, 403)
        self.assertEqual(
            response.json(),
            {"detail": "You don't have permission to see other users name history."},
        )