Merge remote-tracking branch 'origin/master' into feature/master_merge

Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>

mayan/apps/document_states/tests/test_api.py

@@ -1,19 +1,28 @@
-from __future__ import unicode_literals
+from __future__ import absolute_import, unicode_literals
 
 from django.contrib.auth import get_user_model
+from django.contrib.auth.models import Group
 from django.core.urlresolvers import reverse
 from django.test import override_settings
 
+from rest_framework.test import APITestCase
+
+from acls.models import AccessControlList
 from documents.models import DocumentType
 from documents.tests.literals import (
     TEST_DOCUMENT_TYPE, TEST_SMALL_DOCUMENT_PATH
 )
+from permissions import Permission
+from permissions.models import Role
+from permissions.tests.literals import TEST_ROLE_LABEL
 from rest_api.tests import BaseAPITestCase
-from user_management.tests.literals import (
-    TEST_ADMIN_EMAIL, TEST_ADMIN_PASSWORD, TEST_ADMIN_USERNAME
+from user_management.tests import (
+    TEST_ADMIN_EMAIL, TEST_ADMIN_PASSWORD, TEST_ADMIN_USERNAME, TEST_GROUP,
+    TEST_USER_EMAIL, TEST_USER_USERNAME, TEST_USER_PASSWORD
 )
 
 from ..models import Workflow
+from ..permissions import permission_workflow_transition
 
 from .literals import (
     TEST_WORKFLOW_LABEL, TEST_WORKFLOW_LABEL_EDITED,
@@ -634,3 +643,154 @@ class DocumentWorkflowsAPITestCase(BaseAPITestCase):
             response.data['results'][0]['transition']['label'],
             TEST_WORKFLOW_TRANSITION_LABEL
         )
+
+
+@override_settings(OCR_AUTO_OCR=False)
+class DocumentWorkflowsTransitionACLsAPITestCase(APITestCase):
+    def setUp(self):
+        self.user = get_user_model().objects.create_user(
+            username=TEST_USER_USERNAME, email=TEST_USER_EMAIL,
+            password=TEST_USER_PASSWORD
+        )
+
+        self.client.login(
+            username=TEST_USER_USERNAME, password=TEST_USER_PASSWORD
+        )
+
+        self.document_type = DocumentType.objects.create(
+            label=TEST_DOCUMENT_TYPE
+        )
+
+        self.group = Group.objects.create(name=TEST_GROUP)
+        self.role = Role.objects.create(label=TEST_ROLE_LABEL)
+        self.group.user_set.add(self.user)
+        self.role.groups.add(self.group)
+        Permission.invalidate_cache()
+
+    def tearDown(self):
+        if hasattr(self, 'document_type'):
+            self.document_type.delete()
+
+    def _create_document(self):
+        with open(TEST_SMALL_DOCUMENT_PATH) as file_object:
+            self.document = self.document_type.new_document(
+                file_object=file_object
+            )
+
+    def _create_workflow(self):
+        self.workflow = Workflow.objects.create(label=TEST_WORKFLOW_LABEL)
+        self.workflow.document_types.add(self.document_type)
+
+    def _create_workflow_states(self):
+        self._create_workflow()
+        self.workflow_state_1 = self.workflow.states.create(
+            completion=TEST_WORKFLOW_INITIAL_STATE_COMPLETION,
+            initial=True, label=TEST_WORKFLOW_INITIAL_STATE_LABEL
+        )
+        self.workflow_state_2 = self.workflow.states.create(
+            completion=TEST_WORKFLOW_STATE_COMPLETION,
+            label=TEST_WORKFLOW_STATE_LABEL
+        )
+
+    def _create_workflow_transition(self):
+        self._create_workflow_states()
+        self.workflow_transition = self.workflow.transitions.create(
+            label=TEST_WORKFLOW_TRANSITION_LABEL,
+            origin_state=self.workflow_state_1,
+            destination_state=self.workflow_state_2,
+        )
+
+    def test_workflow_transition_view_no_permission(self):
+        self._create_workflow_transition()
+        self._create_document()
+
+        workflow_instance = self.document.workflows.first()
+
+        self.client.post(
+            reverse(
+                'rest_api:workflowinstancelogentry-list', args=(
+                    self.document.pk, workflow_instance.pk
+                ),
+            ), data={'transition_pk': self.workflow_transition.pk}
+        )
+
+        workflow_instance.refresh_from_db()
+
+        self.assertEqual(workflow_instance.log_entries.count(), 0)
+
+    def test_workflow_transition_view_with_permission(self):
+        self._create_workflow_transition()
+        self._create_document()
+
+        workflow_instance = self.document.workflows.first()
+
+        self.role.permissions.add(
+            permission_workflow_transition.stored_permission
+        )
+
+        self.client.post(
+            reverse(
+                'rest_api:workflowinstancelogentry-list', args=(
+                    self.document.pk, workflow_instance.pk
+                ),
+            ), data={'transition_pk': self.workflow_transition.pk}
+        )
+
+        workflow_instance.refresh_from_db()
+
+        self.assertEqual(
+            workflow_instance.log_entries.first().transition.label,
+            TEST_WORKFLOW_TRANSITION_LABEL
+        )
+
+    def test_workflow_transition_view_with_workflow_acl(self):
+        self._create_workflow_transition()
+        self._create_document()
+
+        workflow_instance = self.document.workflows.first()
+
+        acl = AccessControlList.objects.create(
+            content_object=self.workflow, role=self.role
+        )
+        acl.permissions.add(permission_workflow_transition.stored_permission)
+
+        self.client.post(
+            reverse(
+                'rest_api:workflowinstancelogentry-list', args=(
+                    self.document.pk, workflow_instance.pk
+                ),
+            ), data={'transition_pk': self.workflow_transition.pk}
+        )
+
+        workflow_instance.refresh_from_db()
+
+        self.assertEqual(
+            workflow_instance.log_entries.first().transition.label,
+            TEST_WORKFLOW_TRANSITION_LABEL
+        )
+
+    def test_workflow_transition_view_transition_acl(self):
+        self._create_workflow_transition()
+        self._create_document()
+
+        workflow_instance = self.document.workflows.first()
+
+        acl = AccessControlList.objects.create(
+            content_object=self.workflow_transition, role=self.role
+        )
+        acl.permissions.add(permission_workflow_transition.stored_permission)
+
+        self.client.post(
+            reverse(
+                'rest_api:workflowinstancelogentry-list', args=(
+                    self.document.pk, workflow_instance.pk
+                ),
+            ), data={'transition_pk': self.workflow_transition.pk}
+        )
+
+        workflow_instance.refresh_from_db()
+
+        self.assertEqual(
+            workflow_instance.log_entries.first().transition.label,
+            TEST_WORKFLOW_TRANSITION_LABEL
+        )