github-jwinterm/modoboa
1
0
Fork 0
mirror of https://github.com/jwinterm/modoboa.git synced 2026-11-12 08:53:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

* unit tests updated

Browse Source 
* some permission issues fixed

see #204
This commit is contained in:
Antoine Nguyen
2012-04-09 20:07:09 +02:00
parent ec0904cb8b
commit a4b5ebafd9
8 changed files with 189 additions and 104 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/tests.py
+133 -84
View File
@@ -1,15 +1,8 @@
# coding: utf-8
"""
Basic tests for the 'admin' application
=======================================
Liste des tests effectués
=========================
Permissions
-----------
* Vérifier qu'un admin de domaine qui modifie son propre compte laisse
le rôle intact
"""
from django.test import TestCase
@@ -18,6 +11,7 @@ from django.utils import simplejson
from models import *
from modoboa.admin.lib import *
from modoboa.lib import parameters
from modoboa.lib.tests import ModoTestCase
import os
@@ -43,10 +37,10 @@ class DomainTestCase(TestCase):
dom.delete()
self.assertEqual(os.path.exists(path), False)
class DomainAliasTestCase(TestCase):
class DomainAliasTestCase(ModoTestCase):
fixtures = ["test_content.json"]
def test(self):
def test_model(self):
dom = Domain.objects.get(name="test.com")
domal = DomainAlias()
domal.name = "domalias.net"
@@ -58,36 +52,52 @@ class DomainAliasTestCase(TestCase):
domal.save()
domal.delete()
class MailboxTestCase(TestCase):
def test_form(self):
clt = Client()
clt.login(username="admin", password="password")
dom = Domain.objects.get(name="test.com")
values = dict(name=dom.name, quota=dom.quota, enabled=dom.enabled,
aliases="domalias.net", aliases_1="domalias.com")
self.check_ajax_post("/modoboa/admin/domains/1/edit/", values)
self.assertEqual(len(dom.domainalias_set.all()), 2)
del values["aliases_1"]
self.check_ajax_post("/modoboa/admin/domains/1/edit/", values)
self.assertEqual(len(dom.domainalias_set.all()), 1)
class AccountTestCase(ModoTestCase):
fixtures = ["test_content.json",]
def test(self):
dom = Domain.objects.get(name="test.com")
mb = Mailbox()
mb.address = "tester"
mb.domain = dom
mb.save(name="Tester toto", password="toto", enabled=True)
values = dict(username="tester@test.com", first_name="Tester", last_name="Toto",
password1="toto", password2="toto", role="SimpleUsers",
is_active=True, email="tester@test.com", stepid=2)
self.check_ajax_post("/modoboa/admin/accounts/new/", values)
account = User.objects.get(username="tester@test.com")
mb = account.mailbox_set.all()[0]
self.assertEqual(mb.full_address, "tester@test.com")
self.assertEqual(os.path.exists(mb.full_path), True)
self.assertEqual(mb.quota, 100)
self.assertEqual(mb.enabled, True)
self.assertIsNotNone(mb.user)
self.assertEqual(mb.user.username, mb.full_address)
self.assertTrue(mb.user.check_password("toto"))
self.assertEqual(mb.user.first_name, "Tester")
self.assertEqual(mb.user.last_name, "toto")
self.assertEqual(dom.mailbox_count, 2)
self.assertEqual(account.username, mb.full_address)
self.assertTrue(account.check_password("toto"))
self.assertEqual(account.first_name, "Tester")
self.assertEqual(account.last_name, "Toto")
self.assertEqual(mb.domain.mailbox_count, 3)
mb.address = "pouet"
mb.save()
values["email"] = "pouet@test.com"
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % account.id, values)
mb = Mailbox.objects.get(pk=mb.id)
self.assertEqual(mb.path, "%s/" % mb.address)
path = mb.full_path
self.assertEqual(mb.full_address, "pouet@test.com")
self.assertEqual(os.path.exists(path), True)
mb.delete()
self.check_ajax_get("/modoboa/admin/accounts/delete/?selection=%d" \
% account.id, {})
self.assertEqual(os.path.exists(path), False)
def test_update_password(self):
@@ -97,90 +107,129 @@ class MailboxTestCase(TestCase):
* The default admin changes his password (no associated Mailbox)
* A normal user changes his password
"""
clt = Client()
self.assertEqual(clt.login(username="admin", password="password"), True)
response = clt.post("/modoboa/userprefs/changepassword/",
self.check_ajax_post("/modoboa/userprefs/changepassword/",
{"oldpassword" : "password",
"newpassword" : "titi", "confirmation" : "titi"})
self.assertEqual(response.status_code, 200)
obj = simplejson.loads(response.content)
self.assertEqual(obj["status"], "ok")
clt.logout()
self.assertEqual(clt.login(username="admin", password="titi"), True)
self.clt.logout()
self.assertEqual(clt.login(username="user@test.com", password="toto"),
self.assertEqual(self.clt.login(username="admin", password="titi"), True)
self.assertEqual(self.clt.login(username="user@test.com", password="toto"),
True)
response = clt.post("/modoboa/userprefs/changepassword/",
self.check_ajax_post("/modoboa/userprefs/changepassword/",
{"oldpassword" : "toto",
"newpassword" : "tutu", "confirmation" : "tutu"})
self.assertEqual(response.status_code, 200)
obj = simplejson.loads(response.content)
self.assertEqual(obj["status"], "ok")
clt.logout()
self.assertEqual(clt.login(username="user@test.com", password="tutu"), True)
self.clt.logout()
self.assertEqual(self.clt.login(username="user@test.com", password="tutu"), True)
class AliasTestCase(TestCase):
class AliasTestCase(ModoTestCase):
fixtures = ["test_content.json"]
def test(self):
dom = Domain.objects.get(name="test.com")
mb = Mailbox.objects.get(domain=dom, address="user")
al = Alias()
al.address = "alias"
al.domain = dom
al.enabled = True
al.save([mb], ["toto@extdomain.com"])
self.assertEqual(al.full_address, "alias@test.com")
self.assertEqual(mb.alias_count, 1)
def test_alias(self):
user = User.objects.get(username="user@test.com")
values = dict(
username="user@test.com", role="SimpleUsers",
is_active=user.is_active, email="user@test.com",
aliases="toto@test.com", aliases_1="titi@test.com"
)
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % user.id, values)
self.assertEqual(len(user.mailbox_set.all()[0].alias_set.all()), 2)
al.address = "global"
al.save([mb], [])
self.assertEqual(al.full_address, "global@test.com")
self.assertEqual(mb.alias_count, 1)
self.assertEqual(al.extmboxes, "")
del values["aliases_1"]
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % user.id, values)
self.assertEqual(len(user.mailbox_set.all()[0].alias_set.all()), 1)
al.delete()
self.assertEqual(mb.alias_count, 0)
def test_dlist(self):
values = dict(email="all@test.com",
recipients="user@test.com",
recipients_1="admin@test.com",
recipients_2="ext@titi.com",
enabled=True)
self.check_ajax_post("/modoboa/admin/distriblists/new/", values)
user = User.objects.get(username="user@test.com")
self.assertEqual(len(user.mailbox_set.all()[0].alias_set.all()), 1)
admin = User.objects.get(username="admin@test.com")
self.assertEqual(len(admin.mailbox_set.all()[0].alias_set.all()), 1)
class PermissionsTestCase(TestCase):
dlist = Alias.objects.get(address="all", domain__name="test.com")
self.assertEqual(len(dlist.get_recipients()), 3)
del values["recipients_1"]
self.check_ajax_post("/modoboa/admin/distriblists/edit/%d/" % dlist.id,
values)
self.assertEqual(len(dlist.get_recipients()), 2)
self.check_ajax_get("/modoboa/admin/distriblists/delete/?selection=%d" \
% dlist.id, {})
self.assertRaises(Alias.DoesNotExist, Alias.objects.get,
address="all", domain__name="test.com")
class PermissionsTestCase(ModoTestCase):
fixtures = ["test_content.json"]
def setUp(self):
self.clt = Client()
self.clt.login(username="admin", password="password")
from modoboa.lib.permissions import grant_access_to_object
super(PermissionsTestCase, self).setUp()
self.user = User.objects.get(username="user@test.com")
self.values = dict(
username=self.user.username, role="DomainAdmins",
is_active=self.user.is_active, email="user@test.com"
)
grant_access_to_object(User.objects.get(username="admin@test.com"),
Domain.objects.get(name="test.com"))
def tearDown(self):
self.clt.logout()
def test_domain_admins(self):
response = self.clt.post("/modoboa/admin/accounts/edit/%d/" % self.user.id,
{"role" : "DomainAdmins"})
self.assertEqual(response.status_code, 200)
obj = simplejson.loads(response.content)
self.assertEqual(obj["status"], "ok")
self.values["role"] = "DomainAdmins"
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % self.user.id,
self.values)
self.assertEqual(self.user.group == "DomainAdmins", True)
response = self.clt.get("/modoboa/admin/accounts/edit/%d/" % self.user.id,
{"role" : "SimpleUsers"})
self.assertEqual(response.status_code, 200)
obj = simplejson.loads(response.content)
self.assertEqual(obj["status"], "ok")
self.values["role"] = "SimpleUsers"
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % self.user.id,
self.values)
self.assertEqual(self.user.group == 'DomainAdmins', False)
def test_superusers(self):
response = self.clt.post("/modoboa/admin/permissions/add/",
{"role" : "super_admins", "user" : self.user.id})
self.assertEqual(response.status_code, 200)
obj = simplejson.loads(response.content)
self.assertEqual(obj["status"], "ok")
self.values["role"] = "SuperAdmins"
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % self.user.id,
self.values)
self.assertEqual(User.objects.get(username="user@test.com").is_superuser, True)
response = self.clt.get("/modoboa/admin/permissions/delete/",
{"role" : "super_admins", "selection" : self.user.id})
self.assertEqual(response.status_code, 200)
obj = simplejson.loads(response.content)
self.assertEqual(obj["status"], "ok")
self.values["role"] = "SimpleUsers"
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % self.user.id,
self.values)
self.assertEqual(User.objects.get(username="user@test.com").is_superuser, False)
def test_self_modif(self):
self.clt.logout()
self.assertEqual(self.clt.login(username="admin@test.com", password="toto"),
True)
admin = User.objects.get(username="admin@test.com")
values = dict(username="admin@test.com", first_name="Admin",
is_active=True, email="admin@test.com")
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % admin.id, values)
self.assertEqual(admin.group, "DomainAdmins")
self.assertEqual(admin.can_access(Domain.objects.get(name="test.com")), True)
values["role"] = "SuperAdmins"
self.check_ajax_post("/modoboa/admin/accounts/edit/%d/" % admin.id, values)
admin = User.objects.get(username="admin@test.com")
self.assertEqual(admin.group, "DomainAdmins")
def test_domadmin_access(self):
self.clt.logout()
self.assertEqual(self.clt.login(username="admin@test.com", password="toto"),
True)
response = self.clt.get("/modoboa/admin/domains/")
self.assertEqual(response.status_code, 302)
user = User.objects.get(username="user@test.com")
response = self.clt.get("/modoboa/admin/accounts/edit/%d/" % user.id,
HTTP_X_REQUESTED_WITH='XMLHttpRequest')
self.assertNotEqual(response["Content-Type"], "application/json")