240 lines
8.0 KiB
Python
240 lines
8.0 KiB
Python
from __future__ import absolute_import, unicode_literals
|
|
|
|
from django.utils.encoding import force_text
|
|
|
|
from mayan.apps.common.tests import GenericViewTestCase
|
|
|
|
from ..classes import ModelPermission
|
|
from ..models import AccessControlList
|
|
from ..permissions import permission_acl_edit, permission_acl_view
|
|
|
|
from .mixins import ACLTestMixin
|
|
|
|
|
|
class AccessControlListViewTestCase(ACLTestMixin, GenericViewTestCase):
|
|
def setUp(self):
|
|
super(AccessControlListViewTestCase, self).setUp()
|
|
|
|
self._create_test_model()
|
|
self._create_test_object()
|
|
ModelPermission.register(
|
|
model=self.test_object._meta.model, permissions=(
|
|
permission_acl_edit, permission_acl_view,
|
|
)
|
|
)
|
|
|
|
self._create_test_permission()
|
|
ModelPermission.register(
|
|
model=self.test_object._meta.model, permissions=(
|
|
self.test_permission,
|
|
)
|
|
)
|
|
|
|
self._inject_test_object_content_type()
|
|
|
|
self._create_test_acl()
|
|
self.test_acl.permissions.add(self.test_permission.stored_permission)
|
|
|
|
def _request_acl_create_get_view(self):
|
|
return self.get(
|
|
viewname='acls:acl_create',
|
|
kwargs=self.test_content_object_view_kwargs, data={
|
|
'role': self.test_role.pk
|
|
}
|
|
)
|
|
|
|
def test_acl_create_get_view_no_permission(self):
|
|
self.test_acl.delete()
|
|
|
|
response = self._request_acl_create_get_view()
|
|
self.assertEqual(response.status_code, 404)
|
|
|
|
self.assertFalse(self.test_object.acls.filter(role=self.test_role).exists())
|
|
|
|
def test_acl_create_get_view_with_object_access(self):
|
|
self.test_acl.delete()
|
|
self.grant_access(obj=self.test_object, permission=permission_acl_edit)
|
|
|
|
response = self._request_acl_create_get_view()
|
|
self.assertContains(
|
|
response=response, text=force_text(self.test_object),
|
|
status_code=200
|
|
)
|
|
|
|
self.assertFalse(self.test_object.acls.filter(role=self.test_role).exists())
|
|
|
|
def _request_acl_create_post_view(self):
|
|
return self.post(
|
|
viewname='acls:acl_create',
|
|
kwargs=self.test_content_object_view_kwargs, data={
|
|
'role': self.test_role.pk
|
|
}
|
|
)
|
|
|
|
def test_acl_create_view_post_no_permission(self):
|
|
self.test_acl.delete()
|
|
|
|
response = self._request_acl_create_post_view()
|
|
self.assertEqual(response.status_code, 404)
|
|
|
|
self.assertFalse(self.test_object.acls.filter(role=self.test_role).exists())
|
|
|
|
def test_acl_create_view_post_with_access(self):
|
|
self.test_acl.delete()
|
|
self.grant_access(obj=self.test_object, permission=permission_acl_edit)
|
|
|
|
response = self._request_acl_create_post_view()
|
|
self.assertEqual(response.status_code, 302)
|
|
|
|
self.assertTrue(self.test_object.acls.filter(role=self.test_role).exists())
|
|
|
|
def test_acl_create_duplicate_view_with_access(self):
|
|
"""
|
|
Test creating a duplicate ACL entry: same object & role
|
|
Result: Should redirect to existing ACL for object + role combination
|
|
"""
|
|
self.grant_access(obj=self.test_object, permission=permission_acl_edit)
|
|
|
|
response = self._request_acl_create_post_view()
|
|
self.assertNotContains(
|
|
response=response, text=force_text(self.test_acl.role),
|
|
status_code=200
|
|
)
|
|
|
|
# 2 ACLs: 1 created by the test and the other by the self.grant_access
|
|
self.assertEqual(AccessControlList.objects.count(), 2)
|
|
|
|
# Sorted by role PK
|
|
expected_results = sorted(
|
|
[
|
|
{
|
|
# Test role, created and then requested,
|
|
# but created only once
|
|
'object_id': self.test_object.pk,
|
|
'role': self.test_role.pk
|
|
},
|
|
{
|
|
# Test case ACL for the test case role, ignored
|
|
'object_id': self.test_object.pk,
|
|
'role': self._test_case_role.pk
|
|
},
|
|
], key=lambda item: item['role']
|
|
)
|
|
|
|
self.assertQuerysetEqual(
|
|
qs=AccessControlList.objects.order_by('role__id').values(
|
|
'object_id', 'role',
|
|
), transform=dict, values=expected_results
|
|
)
|
|
|
|
def _request_acl_delete_view(self):
|
|
return self.post(
|
|
viewname='acls:acl_delete', kwargs={'acl_id': self.test_acl.pk}
|
|
)
|
|
|
|
def test_acl_delete_view_no_permission(self):
|
|
response = self._request_acl_delete_view()
|
|
self.assertNotContains(
|
|
response=response, text=force_text(self.test_object),
|
|
status_code=404
|
|
)
|
|
|
|
self.assertTrue(self.test_object.acls.filter(role=self.test_role).exists())
|
|
|
|
def test_acl_delete_view_with_access(self):
|
|
self.grant_access(
|
|
obj=self.test_object, permission=permission_acl_edit
|
|
)
|
|
|
|
response = self._request_acl_delete_view()
|
|
self.assertEqual(response.status_code, 302)
|
|
|
|
self.assertFalse(self.test_object.acls.filter(role=self.test_role).exists())
|
|
|
|
def _request_acl_list_view(self):
|
|
return self.get(
|
|
viewname='acls:acl_list', kwargs=self.test_content_object_view_kwargs
|
|
)
|
|
|
|
def test_acl_list_view_no_permission(self):
|
|
response = self._request_acl_list_view()
|
|
|
|
self.assertNotContains(
|
|
response=response, text=force_text(self.test_object),
|
|
status_code=404
|
|
)
|
|
|
|
def test_acl_list_view_with_access(self):
|
|
self.grant_access(obj=self.test_object, permission=permission_acl_view)
|
|
|
|
response = self._request_acl_list_view()
|
|
|
|
self.assertContains(
|
|
response=response, text=force_text(self.test_object),
|
|
status_code=200
|
|
)
|
|
|
|
def _request_get_acl_permissions_get_view(self):
|
|
return self.get(
|
|
viewname='acls:acl_permissions',
|
|
kwargs={'acl_id': self.test_acl.pk}
|
|
)
|
|
|
|
def test_acl_permissions_get_view_no_permission(self):
|
|
self.test_acl.permissions.clear()
|
|
|
|
response = self._request_get_acl_permissions_get_view()
|
|
self.assertNotContains(
|
|
response=response, text=force_text(self.test_object),
|
|
status_code=404
|
|
)
|
|
|
|
self.assertFalse(
|
|
self.test_object.acls.filter(permissions=self.test_permission.stored_permission).exists()
|
|
)
|
|
|
|
def test_acl_permissions_get_view_with_access(self):
|
|
self.test_acl.permissions.clear()
|
|
self.grant_access(obj=self.test_object, permission=permission_acl_edit)
|
|
|
|
response = self._request_get_acl_permissions_get_view()
|
|
self.assertContains(
|
|
response=response, text=force_text(self.test_object),
|
|
status_code=200
|
|
)
|
|
|
|
self.assertFalse(
|
|
self.test_object.acls.filter(permissions=self.test_permission.stored_permission).exists()
|
|
)
|
|
|
|
def _request_post_acl_permissions_post_view(self):
|
|
return self.post(
|
|
viewname='acls:acl_permissions',
|
|
kwargs={'acl_id': self.test_acl.pk},
|
|
data={'available-selection': self.test_permission.stored_permission.pk}
|
|
)
|
|
|
|
def test_acl_permissions_post_view_no_permission(self):
|
|
self.test_acl.permissions.clear()
|
|
|
|
response = self._request_post_acl_permissions_post_view()
|
|
self.assertNotContains(
|
|
response=response, text=force_text(self.test_object),
|
|
status_code=404
|
|
)
|
|
|
|
self.assertFalse(
|
|
self.test_object.acls.filter(permissions=self.test_permission.stored_permission).exists()
|
|
)
|
|
|
|
def test_acl_permissions_post_view_with_access(self):
|
|
self.test_acl.permissions.clear()
|
|
self.grant_access(obj=self.test_object, permission=permission_acl_edit)
|
|
|
|
response = self._request_post_acl_permissions_post_view()
|
|
self.assertEqual(response.status_code, 302)
|
|
|
|
self.assertTrue(
|
|
self.test_object.acls.filter(permissions=self.test_permission.stored_permission).exists()
|
|
)
|