forked from DGNum/gestioCOF
05eeb6a25c
Refer to allauth doc for an accurate features list: http://django-allauth.readthedocs.io/en/latest/ Users can now change their password, ask for a password reset, or set one if they don't have one. In particular, it allows users whose account has been created via a clipper authentication to configure a password before losing their clipper. Even if they have already lost it, they are able to get one using the "Reset password" functionality. Allauth multiple emails management is deactivated. Requests to the related url redirect to the home page. All the login and logout views are replaced by the allauth' ones. It also concerns the Django and Wagtail admin sites. Note that users are no longer logged out of the clipper CAS server when they authenticated via this server. Instead a message suggests the user to disconnect. Clipper connections and `login_clipper` --------------------------------------- - Non-empty `login_clipper` are now unique among `CofProfile` instances. - They are created once for users with a non-empty 'login_clipper' (with the data migration 0014_create_clipper_connections). - The `login_clipper` of CofProfile instances are sync with their clipper connections: * `CofProfile.sync_clipper_connections` method updates the connections based on `login_clipper`. * Signals receivers `sync_clipper…` update `login_clipper` based on connections creations/updates/deletions. Misc ---- - Add NullCharField (model field) which allows to use `unique=True` on CharField (even with empty strings). - Parts of kfet mixins for TestCase are now in shared.tests.testcase, as they are used elsewhere than in the kfet app.
70 lines
2.5 KiB
Python
70 lines
2.5 KiB
Python
from django.contrib.auth.models import Permission, User
|
|
from django.test import Client, TestCase
|
|
|
|
from kfet.models import Account, Article, ArticleCategory
|
|
|
|
|
|
class TestStats(TestCase):
|
|
def test_user_stats(self):
|
|
"""
|
|
Checks that we can get the stat-related pages without any problem.
|
|
"""
|
|
# We setup two users and an article. Only the first user is part of the
|
|
# team.
|
|
user = User.objects.create(username="Foobar")
|
|
user.set_password("foobar")
|
|
user.save()
|
|
Account.objects.create(trigramme="FOO", cofprofile=user.profile)
|
|
perm = Permission.objects.get(codename="is_team")
|
|
user.user_permissions.add(perm)
|
|
|
|
user2 = User.objects.create(username="Barfoo")
|
|
user2.set_password("barfoo")
|
|
user2.save()
|
|
Account.objects.create(trigramme="BAR", cofprofile=user2.profile)
|
|
|
|
article = Article.objects.create(
|
|
name="article", category=ArticleCategory.objects.create(name="C")
|
|
)
|
|
|
|
# Each user have its own client
|
|
client = Client()
|
|
client.login(username="Foobar", password="foobar")
|
|
client2 = Client()
|
|
client2.login(username="Barfoo", password="barfoo")
|
|
|
|
# 1. FOO should be able to get these pages but BAR receives a Forbidden
|
|
# response
|
|
user_urls = [
|
|
"/k-fet/accounts/FOO/stat/operations/list",
|
|
"/k-fet/accounts/FOO/stat/operations?{}".format(
|
|
"&".join(
|
|
[
|
|
"scale=day",
|
|
"types=['purchase']",
|
|
"scale_args={'n_steps':+7,+'last':+True}",
|
|
"format=json",
|
|
]
|
|
)
|
|
),
|
|
"/k-fet/accounts/FOO/stat/balance/list",
|
|
"/k-fet/accounts/FOO/stat/balance?format=json",
|
|
]
|
|
for url in user_urls:
|
|
resp = client.get(url)
|
|
self.assertEqual(200, resp.status_code)
|
|
resp2 = client2.get(url)
|
|
self.assertEqual(403, resp2.status_code)
|
|
|
|
# 2. FOO is a member of the team and can get these pages but BAR
|
|
# receives a Redirect response
|
|
articles_urls = [
|
|
"/k-fet/articles/{}/stat/sales/list".format(article.pk),
|
|
"/k-fet/articles/{}/stat/sales".format(article.pk),
|
|
]
|
|
for url in articles_urls:
|
|
resp = client.get(url)
|
|
self.assertEqual(200, resp.status_code)
|
|
resp2 = client2.get(url)
|
|
self.assertRedirects(resp2, "/profil/login/?next={}".format(url))
|