forked from Github-Mirrors/canaille
426 lines
13 KiB
Python
426 lines
13 KiB
Python
from canaille.models import User
|
|
from webtest import Upload
|
|
|
|
|
|
def test_edition_permission(
|
|
testclient,
|
|
slapd_server,
|
|
logged_user,
|
|
admin,
|
|
foo_group,
|
|
bar_group,
|
|
jpeg_photo,
|
|
):
|
|
|
|
testclient.app.config["ACL"]["DEFAULT"]["PERMISSIONS"] = []
|
|
testclient.get("/profile/user", status=403)
|
|
|
|
testclient.app.config["ACL"]["DEFAULT"]["PERMISSIONS"] = ["edit_self"]
|
|
testclient.get("/profile/user", status=200)
|
|
|
|
|
|
def test_edition(
|
|
testclient,
|
|
slapd_server,
|
|
logged_user,
|
|
admin,
|
|
foo_group,
|
|
bar_group,
|
|
jpeg_photo,
|
|
):
|
|
res = testclient.get("/profile/user", status=200)
|
|
assert set(res.form["groups"].options) == {
|
|
("cn=foo,ou=groups,dc=mydomain,dc=tld", True, "foo"),
|
|
("cn=bar,ou=groups,dc=mydomain,dc=tld", False, "bar"),
|
|
}
|
|
assert logged_user.groups == [foo_group]
|
|
assert foo_group.member == [logged_user.dn]
|
|
assert bar_group.member == [admin.dn]
|
|
assert res.form["groups"].attrs["readonly"]
|
|
assert res.form["uid"].attrs["readonly"]
|
|
|
|
res.form["uid"] = "toto"
|
|
res.form["givenName"] = "given_name"
|
|
res.form["sn"] = "family_name"
|
|
res.form["displayName"] = "display_name"
|
|
res.form["mail"] = "email@mydomain.tld"
|
|
res.form["telephoneNumber"] = "555-666-777"
|
|
res.form["postalAddress"] = "postal_address"
|
|
res.form["employeeNumber"] = 666
|
|
res.form["groups"] = [
|
|
"cn=foo,ou=groups,dc=mydomain,dc=tld",
|
|
"cn=bar,ou=groups,dc=mydomain,dc=tld",
|
|
]
|
|
res.form["preferredLanguage"] = "fr"
|
|
res.form["jpegPhoto"] = Upload("logo.jpg", jpeg_photo)
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
assert "Profile updated successfuly." in res, str(res)
|
|
|
|
logged_user = User.get(dn=logged_user.dn)
|
|
logged_user.load_groups()
|
|
|
|
assert ["user"] == logged_user.uid
|
|
assert ["given_name"] == logged_user.givenName
|
|
assert ["family_name"] == logged_user.sn
|
|
assert "display_name" == logged_user.displayName
|
|
assert ["email@mydomain.tld"] == logged_user.mail
|
|
assert ["555-666-777"] == logged_user.telephoneNumber
|
|
assert ["postal_address"] == logged_user.postalAddress
|
|
assert "fr" == logged_user.preferredLanguage
|
|
assert "666" == logged_user.employeeNumber
|
|
assert [jpeg_photo] == logged_user.jpegPhoto
|
|
|
|
foo_group.reload()
|
|
bar_group.reload()
|
|
assert logged_user.groups == [foo_group]
|
|
assert foo_group.member == [logged_user.dn]
|
|
assert bar_group.member == [admin.dn]
|
|
|
|
assert logged_user.check_password("correct horse battery staple")
|
|
|
|
logged_user.uid = ["user"]
|
|
logged_user.cn = ["John (johnny) Doe"]
|
|
logged_user.sn = ["Doe"]
|
|
logged_user.mail = ["john@doe.com"]
|
|
logged_user.givenName = None
|
|
logged_user.jpegPhoto = None
|
|
logged_user.save()
|
|
|
|
|
|
def test_field_permissions_none(testclient, slapd_server, logged_user):
|
|
testclient.get("/profile/user", status=200)
|
|
logged_user.telephoneNumber = ["555-666-777"]
|
|
logged_user.save()
|
|
|
|
testclient.app.config["ACL"]["DEFAULT"] = {
|
|
"READ": ["uid"],
|
|
"WRITE": [],
|
|
"PERMISSIONS": ["edit_self"],
|
|
}
|
|
|
|
res = testclient.get("/profile/user", status=200)
|
|
assert "telephoneNumber" not in res.form.fields
|
|
|
|
testclient.post(
|
|
"/profile/user", {"action": "edit", "telephoneNumber": "000-000-000"}
|
|
)
|
|
user = User.get(dn=logged_user.dn)
|
|
assert user.telephoneNumber == ["555-666-777"]
|
|
|
|
|
|
def test_field_permissions_read(testclient, slapd_server, logged_user):
|
|
testclient.get("/profile/user", status=200)
|
|
logged_user.telephoneNumber = ["555-666-777"]
|
|
logged_user.save()
|
|
|
|
testclient.app.config["ACL"]["DEFAULT"] = {
|
|
"READ": ["uid", "telephoneNumber"],
|
|
"WRITE": [],
|
|
"PERMISSIONS": ["edit_self"],
|
|
}
|
|
res = testclient.get("/profile/user", status=200)
|
|
assert "telephoneNumber" in res.form.fields
|
|
|
|
testclient.post(
|
|
"/profile/user", {"action": "edit", "telephoneNumber": "000-000-000"}
|
|
)
|
|
user = User.get(dn=logged_user.dn)
|
|
assert user.telephoneNumber == ["555-666-777"]
|
|
|
|
|
|
def test_field_permissions_write(testclient, slapd_server, logged_user):
|
|
testclient.get("/profile/user", status=200)
|
|
logged_user.telephoneNumber = ["555-666-777"]
|
|
logged_user.save()
|
|
|
|
testclient.app.config["ACL"]["DEFAULT"] = {
|
|
"READ": ["uid"],
|
|
"WRITE": ["telephoneNumber"],
|
|
"PERMISSIONS": ["edit_self"],
|
|
}
|
|
res = testclient.get("/profile/user", status=200)
|
|
assert "telephoneNumber" in res.form.fields
|
|
|
|
testclient.post(
|
|
"/profile/user", {"action": "edit", "telephoneNumber": "000-000-000"}
|
|
)
|
|
user = User.get(dn=logged_user.dn)
|
|
assert user.telephoneNumber == ["000-000-000"]
|
|
|
|
|
|
def test_simple_user_cannot_edit_other(testclient, logged_user):
|
|
testclient.get("/profile/user", status=200)
|
|
testclient.get("/profile/admin", status=403)
|
|
testclient.post("/profile/admin", {"action": "edit"}, status=403)
|
|
testclient.post("/profile/admin", {"action": "delete"}, status=403)
|
|
testclient.get("/users", status=403)
|
|
|
|
|
|
def test_bad_email(testclient, logged_user):
|
|
res = testclient.get("/profile/user", status=200)
|
|
|
|
res.form["mail"] = "john@doe.com"
|
|
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
|
|
assert ["john@doe.com"] == logged_user.mail
|
|
|
|
res = testclient.get("/profile/user", status=200)
|
|
|
|
res.form["mail"] = "yolo"
|
|
|
|
res = res.form.submit(name="action", value="edit", status=200)
|
|
|
|
logged_user.reload()
|
|
|
|
assert ["john@doe.com"] == logged_user.mail
|
|
|
|
|
|
def test_surname_is_mandatory(testclient, logged_user):
|
|
res = testclient.get("/profile/user", status=200)
|
|
logged_user.sn = ["Doe"]
|
|
|
|
res.form["sn"] = ""
|
|
|
|
res = res.form.submit(name="action", value="edit", status=200)
|
|
|
|
logged_user.reload()
|
|
|
|
assert ["Doe"] == logged_user.sn
|
|
|
|
|
|
def test_password_change(testclient, logged_user):
|
|
res = testclient.get("/profile/user", status=200)
|
|
|
|
res.form["password1"] = "new_password"
|
|
res.form["password2"] = "new_password"
|
|
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
|
|
assert logged_user.check_password("new_password")
|
|
|
|
res = testclient.get("/profile/user", status=200)
|
|
|
|
res.form["password1"] = "correct horse battery staple"
|
|
res.form["password2"] = "correct horse battery staple"
|
|
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
assert "Profile updated successfuly" in res
|
|
|
|
assert logged_user.check_password("correct horse battery staple")
|
|
|
|
|
|
def test_password_change_fail(testclient, logged_user):
|
|
res = testclient.get("/profile/user", status=200)
|
|
|
|
res.form["password1"] = "new_password"
|
|
res.form["password2"] = "other_password"
|
|
|
|
res = res.form.submit(name="action", value="edit", status=200)
|
|
|
|
assert logged_user.check_password("correct horse battery staple")
|
|
|
|
res = testclient.get("/profile/user", status=200)
|
|
|
|
res.form["password1"] = "new_password"
|
|
res.form["password2"] = ""
|
|
|
|
res = res.form.submit(name="action", value="edit", status=200)
|
|
|
|
assert logged_user.check_password("correct horse battery staple")
|
|
|
|
|
|
def test_admin_bad_request(testclient, logged_moderator):
|
|
testclient.post("/profile/admin", {"action": "foobar"}, status=400)
|
|
testclient.get("/profile/foobar", status=404)
|
|
|
|
|
|
def test_user_creation_edition_and_deletion(
|
|
testclient, logged_moderator, foo_group, bar_group
|
|
):
|
|
# The user does not exist.
|
|
res = testclient.get("/users", status=200)
|
|
assert User.get("george") is None
|
|
assert "george" not in res.text
|
|
|
|
# Fill the profile for a new user.
|
|
res = testclient.get("/profile", status=200)
|
|
res.form["uid"] = "george"
|
|
res.form["givenName"] = "George"
|
|
res.form["sn"] = "Abitbol"
|
|
res.form["mail"] = "george@abitbol.com"
|
|
res.form["telephoneNumber"] = "555-666-888"
|
|
res.form["groups"] = ["cn=foo,ou=groups,dc=mydomain,dc=tld"]
|
|
res.form["password1"] = "totoyolo"
|
|
res.form["password2"] = "totoyolo"
|
|
|
|
# User have been created
|
|
res = res.form.submit(name="action", value="edit", status=302).follow(status=200)
|
|
george = User.get("george")
|
|
george.load_groups()
|
|
foo_group.reload()
|
|
assert "George" == george.givenName[0]
|
|
assert george.groups == [foo_group]
|
|
assert george.check_password("totoyolo")
|
|
|
|
assert "george" in testclient.get("/users", status=200).text
|
|
assert "readonly" not in res.form["groups"].attrs
|
|
|
|
res.form["givenName"] = "Georgio"
|
|
res.form["groups"] = [
|
|
"cn=foo,ou=groups,dc=mydomain,dc=tld",
|
|
"cn=bar,ou=groups,dc=mydomain,dc=tld",
|
|
]
|
|
|
|
# User have been edited
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
george = User.get("george")
|
|
george.load_groups()
|
|
assert "Georgio" == george.givenName[0]
|
|
assert george.check_password("totoyolo")
|
|
|
|
foo_group.reload()
|
|
bar_group.reload()
|
|
assert george.dn in set(foo_group.member)
|
|
assert george.dn in set(bar_group.member)
|
|
assert set(george.groups) == {foo_group, bar_group}
|
|
assert "george" in testclient.get("/users", status=200).text
|
|
assert "george" in testclient.get("/users", status=200).text
|
|
|
|
# User have been deleted.
|
|
res = res.form.submit(name="action", value="delete", status=302).follow(status=200)
|
|
assert User.get("george") is None
|
|
assert "george" not in res.text
|
|
|
|
|
|
def test_cn_setting_with_given_name_and_surname(testclient, logged_moderator):
|
|
res = testclient.get("/profile", status=200)
|
|
res.form["uid"] = "george"
|
|
res.form["givenName"] = "George"
|
|
res.form["sn"] = "Abitbol"
|
|
res.form["mail"] = "george@abitbol.com"
|
|
|
|
res = res.form.submit(name="action", value="edit", status=302).follow(status=200)
|
|
|
|
george = User.get("george")
|
|
assert george.cn[0] == "George Abitbol"
|
|
|
|
|
|
def test_cn_setting_with_surname_only(testclient, logged_moderator):
|
|
res = testclient.get("/profile", status=200)
|
|
res.form["uid"] = "george"
|
|
res.form["sn"] = "Abitbol"
|
|
res.form["mail"] = "george@abitbol.com"
|
|
|
|
res = res.form.submit(name="action", value="edit", status=302).follow(status=200)
|
|
|
|
george = User.get("george")
|
|
assert george.cn[0] == "Abitbol"
|
|
|
|
|
|
def test_first_login_mail_button(smtpd, testclient, slapd_connection, logged_admin):
|
|
User.ldap_object_classes(slapd_connection)
|
|
u = User(
|
|
objectClass=["inetOrgPerson"],
|
|
cn="Temp User",
|
|
sn="Temp",
|
|
uid="temp",
|
|
mail="john@doe.com",
|
|
)
|
|
u.save()
|
|
|
|
res = testclient.get("/profile/temp", status=200)
|
|
assert "This user does not have a password yet" in res
|
|
assert "Send" in res
|
|
|
|
res = res.form.submit(name="action", value="password-initialization-mail").follow()
|
|
assert (
|
|
"A password initialization link has been sent at the user email address. It should be received within 10 minutes."
|
|
in res
|
|
)
|
|
assert len(smtpd.messages) == 1
|
|
|
|
u.reload()
|
|
u.userPassword = ["{SSHA}fw9DYeF/gHTHuVMepsQzVYAkffGcU8Fz"]
|
|
u.save()
|
|
|
|
res = testclient.get("/profile/temp", status=200)
|
|
assert "This user does not have a password yet" not in res
|
|
|
|
u.delete()
|
|
|
|
|
|
def test_email_reset_button(smtpd, testclient, slapd_connection, logged_admin):
|
|
User.ldap_object_classes(slapd_connection)
|
|
u = User(
|
|
objectClass=["inetOrgPerson"],
|
|
cn="Temp User",
|
|
sn="Temp",
|
|
uid="temp",
|
|
mail="john@doe.com",
|
|
userPassword=["{SSHA}fw9DYeF/gHTHuVMepsQzVYAkffGcU8Fz"],
|
|
)
|
|
u.save()
|
|
|
|
res = testclient.get("/profile/temp", status=200)
|
|
assert "If the user has forgotten his password" in res, res.text
|
|
assert "Send" in res
|
|
|
|
res = res.form.submit(name="action", value="password-reset-mail").follow()
|
|
assert (
|
|
"A password reset link has been sent at the user email address. It should be received within 10 minutes."
|
|
in res
|
|
)
|
|
assert len(smtpd.messages) == 1
|
|
|
|
u.delete()
|
|
|
|
|
|
def test_photo_edition(
|
|
testclient,
|
|
slapd_server,
|
|
logged_user,
|
|
jpeg_photo,
|
|
):
|
|
|
|
# Add a photo
|
|
res = testclient.get("/profile/user", status=200)
|
|
res.form["jpegPhoto"] = Upload("logo.jpg", jpeg_photo)
|
|
res.form["jpegPhoto_delete"] = False
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
assert "Profile updated successfuly." in res, str(res)
|
|
|
|
logged_user = User.get(dn=logged_user.dn)
|
|
|
|
assert [jpeg_photo] == logged_user.jpegPhoto
|
|
|
|
# No change
|
|
res = testclient.get("/profile/user", status=200)
|
|
res.form["jpegPhoto_delete"] = False
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
assert "Profile updated successfuly." in res, str(res)
|
|
|
|
logged_user = User.get(dn=logged_user.dn)
|
|
|
|
assert [jpeg_photo] == logged_user.jpegPhoto
|
|
|
|
# Photo deletion
|
|
res = testclient.get("/profile/user", status=200)
|
|
res.form["jpegPhoto_delete"] = True
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
assert "Profile updated successfuly." in res, str(res)
|
|
|
|
logged_user = User.get(dn=logged_user.dn)
|
|
|
|
assert [] == logged_user.jpegPhoto
|
|
|
|
# Photo deletion AND upload, this should never happen
|
|
res = testclient.get("/profile/user", status=200)
|
|
res.form["jpegPhoto"] = Upload("logo.jpg", jpeg_photo)
|
|
res.form["jpegPhoto_delete"] = True
|
|
res = res.form.submit(name="action", value="edit").follow()
|
|
assert "Profile updated successfuly." in res, str(res)
|
|
|
|
logged_user = User.get(dn=logged_user.dn)
|
|
|
|
assert [] == logged_user.jpegPhoto
|