def test_update_submission(self):
"""
Test UPDATE submission
"""
user = mommy.make('auth.User')
user2 = mommy.make('auth.User')
user3 = mommy.make('auth.User')
task = mommy.make('tasking.Task')
submission_data = self._create_submission()
submission_data2 = self._create_submission()
submission_data3 = self._create_submission()
data = {
'target_content_type': self.user_type.id,
'target_id': user.id,
}
# test that target_content_type and target_id can be changed
view = SubmissionViewSet.as_view({'patch': 'partial_update'})
request = self.factory.patch(
'/submissions/{id}'.format(id=submission_data['id']), data=data)
force_authenticate(request, user=user)
response = view(request=request, pk=submission_data['id'])
self.assertEqual(response.status_code, 200)
self.assertEqual(
self.user_type.id,
response.data['target_content_type'])
self.assertEqual(user.id, response.data['target_id'])
data2 = {
'valid': True,
'comments': 'Hello there!',
}
view2 = SubmissionViewSet.as_view({'patch': 'partial_update'})
request2 = self.factory.patch(
'/submissions/{id}'.format(id=submission_data2['id']), data=data2)
force_authenticate(request2, user=user2)
response2 = view2(request=request2, pk=submission_data2['id'])
self.assertEqual(response2.status_code, 200)
self.assertTrue(response2.data['valid'])
self.assertEqual(
'Hello there!',
response2.data['comments'])
data3 = {
'task': task.id
}
# test an error is raised when trying to change task
view3 = SubmissionViewSet.as_view({'patch': 'partial_update'})
request3 = self.factory.patch(
'/submissions/{id}'.format(id=submission_data3['id']), data=data3)
force_authenticate(request3, user=user3)
response3 = view3(request=request3, pk=submission_data3['id'])
self.assertEqual(response3.status_code, 400)
self.assertIn('task', response3.data.keys())
self.assertEqual(CANT_EDIT_TASK,
six.text_type(response3.data['task'][0]))
def test_update_submission(self):
"""
Test UPDATE submission
"""
user = mommy.make("auth.User")
user2 = mommy.make("auth.User")
user3 = mommy.make("auth.User")
task = mommy.make("tasking.Task")
submission_data = self._create_submission()
submission_id = submission_data["id"]
submission_data2 = self._create_submission()
submission2_id = submission_data2["id"]
submission_data3 = self._create_submission()
submission3_id = submission_data3["id"]
data = {
"target_content_type": self.user_type.id,
"target_id": user.id,
}
# test that target_content_type and target_id can be changed
view = SubmissionViewSet.as_view({"patch": "partial_update"})
request = self.factory.patch(f"/submissions/{submission_id}",
data=data)
force_authenticate(request, user=user)
response = view(request=request, pk=submission_id)
self.assertEqual(response.status_code, 200)
self.assertEqual(self.user_type.id,
response.data["target_content_type"])
self.assertEqual(user.id, response.data["target_id"])
data2 = {
"valid": True,
"comments": "Hello there!",
}
view2 = SubmissionViewSet.as_view({"patch": "partial_update"})
request2 = self.factory.patch(f"/submissions/{submission2_id}",
data=data2)
force_authenticate(request2, user=user2)
response2 = view2(request=request2, pk=submission2_id)
self.assertEqual(response2.status_code, 200)
self.assertTrue(response2.data["valid"])
self.assertEqual("Hello there!", response2.data["comments"])
data3 = {"task": task.id}
# test an error is raised when trying to change task
view3 = SubmissionViewSet.as_view({"patch": "partial_update"})
request3 = self.factory.patch(f"/submissions/{submission3_id}",
data=data3)
force_authenticate(request3, user=user3)
response3 = view3(request=request3, pk=submission3_id)
self.assertEqual(response3.status_code, 400)
self.assertIn("task", response3.data.keys())
self.assertEqual(CANT_EDIT_TASK, str(response3.data["task"][0]))
def test_search(self):
"""
Test that you can search for submissions.
"""
user = mommy.make("auth.User")
task1 = mommy.make("tasking.Task")
task2 = mommy.make("tasking.Task", name="Hyperion")
sub1 = mommy.make("tasking.Submission", task=task2)
mommy.make("tasking.Submission", task=task1)
# there are two submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 2)
view = SubmissionViewSet.as_view({"get": "list"})
# Test that we can search by task_name and get back what we expect
request = self.factory.get("/submissions", {"search": "Hyperion"})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(response.data[0]["id"], sub1.id)
self.assertEqual(len(response.data), 1)
# test that we get no results for a name that doesn't exist
request = self.factory.get("/submissions", {"search": "invalid"})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 0)
def test_user_filter(self):
"""
Test that you can filter by user
"""
user = mommy.make("auth.User")
mosh = mommy.make("auth.User", username="******")
# make a bunch of submissions
mommy.make("tasking.Submission", _quantity=7)
# make one submission using the user mosh
submission = mommy.make("tasking.Submission", user=mosh)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 8)
view = SubmissionViewSet.as_view({"get": "list"})
# test that we get submissions for our user mosh
request = self.factory.get("/submissions", {"user": mosh.id})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 1)
self.assertEqual(response.data[0]["id"], submission.id)
def test_task_id_sorting(self):
"""
Test sorting by task id
"""
user = mommy.make('auth.User')
task = mommy.make('tasking.Task')
mommy.make('tasking.Task', _quantity=39) # increase task id counter
task2 = mommy.make('tasking.Task')
# create a bunch of submissions
mommy.make('tasking.Submission', _quantity=17, task=task)
# create one submission using task2
mommy.make('tasking.Submission', task=task2)
view = SubmissionViewSet.as_view({'get': 'list'})
# test task id sorting
request = self.factory.get('/submissions', {'ordering': '-task__id'})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 18)
# pylint: disable=no-member
self.assertEqual(
response.data[0]['id'],
Submission.objects.order_by('-task__id').first().id)
self.assertEqual(
response.data[0]['task'],
task2.id)
def test_valid_filter(self):
"""
Test that you can filter by valid
"""
user = mommy.make("auth.User")
# make a bunch of submissions
mommy.make("tasking.Submission", valid=False, _quantity=7)
# make one submission where valid is True
submission = mommy.make("tasking.Submission", valid=True)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 8)
view = SubmissionViewSet.as_view({"get": "list"})
# test that we get valid submissions
request = self.factory.get("/submissions", {"valid": 1})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 1)
self.assertEqual(response.data[0]["id"], submission.id)
# test that we get not valid submissions
request = self.factory.get("/submissions", {"valid": 0})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 7)
def test_valid_sorting(self):
"""
Test that you can sort by valid
"""
user = mommy.make('auth.User')
# make a bunch of submissions
mommy.make('tasking.Submission', valid=False, _quantity=7)
# make one submission where valid is True
submission = mommy.make('tasking.Submission', valid=True)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 8)
view = SubmissionViewSet.as_view({'get': 'list'})
# test sorting by valid
request = self.factory.get('/submissions', {'ordering': 'valid'})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 8)
self.assertEqual(
response.data[0]['id'],
Submission.objects.order_by('valid').first().id)
self.assertEqual(len(response.data), 8)
self.assertEqual(response.data[-1]['id'], submission.id)
def test_status_sorting(self):
"""
Test that you can sort by status
"""
user = mommy.make("auth.User")
# make a bunch of submissions
mommy.make("tasking.Submission",
status=Submission.REJECTED,
_quantity=7)
# make one submission where status is REJECTED
submission = mommy.make("tasking.Submission",
status=Submission.APPROVED)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 8)
view = SubmissionViewSet.as_view({"get": "list"})
# test sorting by status
request = self.factory.get("/submissions", {"ordering": "-status"})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 8)
self.assertEqual(response.data[0]["id"],
Submission.objects.order_by("-status").first().id)
self.assertEqual(len(response.data), 8)
self.assertEqual(response.data[-1]["id"], submission.id)
def test_status_filter(self):
"""
Test that you can filter by status
"""
user = mommy.make('auth.User')
# make a bunch of submissions
mommy.make('tasking.Submission', status=Submission.PENDING, _quantity=7)
# make one submission where status is APPROVED
submission = mommy.make('tasking.Submission', status=Submission.APPROVED)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 8)
view = SubmissionViewSet.as_view({'get': 'list'})
# test that we get approved submissions
request = self.factory.get('/submissions', {'status': Submission.APPROVED})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 1)
self.assertEqual(response.data[0]['id'], submission.id)
# test that we get pending submissions
request = self.factory.get('/submissions', {'status': Submission.PENDING})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 7)
def test_location_filter(self):
"""
Test that you can filter by location
"""
user = mommy.make('auth.User')
location = mommy.make('tasking.Location')
# make a bunch of submissions
mommy.make('tasking.Submission', _quantity=7)
# make one submission using the location
submission = mommy.make('tasking.Submission', location=location)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 8)
view = SubmissionViewSet.as_view({'get': 'list'})
# test that we get submissions for our location
request = self.factory.get('/submissions', {'location': location.id})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 1)
self.assertEqual(response.data[0]['id'], submission.id)
def test_search(self):
"""
Test that you can search for submissions.
"""
user = mommy.make('auth.User')
task1 = mommy.make('tasking.Task')
task2 = mommy.make('tasking.Task', name='Hyperion')
sub1 = mommy.make('tasking.Submission', task=task2)
mommy.make('tasking.Submission', task=task1)
# there are two submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 2)
view = SubmissionViewSet.as_view({'get': 'list'})
# Test that we can search by task_name and get back what we expect
request = self.factory.get('/submissions', {'search': 'Hyperion'})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(response.data[0]['id'], sub1.id)
self.assertEqual(len(response.data), 1)
# test that we get no results for a name that doesn't exist
request = self.factory.get('/submissions', {'search': 'invalid'})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 0)
def test_created_sorting(self):
"""
Test sorting by created
"""
user = mommy.make("auth.User")
# create a bunch of submissions
mommy.make("tasking.Submission", _quantity=100)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 100)
view = SubmissionViewSet.as_view({"get": "list"})
# test sorting by created
request = self.factory.get("/submissions", {"ordering": "-created"})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 100)
self.assertEqual(response.data[0]["id"],
Submission.objects.order_by("-created").first().id)
self.assertEqual(
response.data[0]["created"],
Submission.objects.order_by("-created").first().created.astimezone(
pytz.timezone("Africa/Nairobi")).isoformat(),
)
self.assertEqual(response.data[-1]["id"],
Submission.objects.order_by("-created").last().id)
self.assertEqual(
response.data[-1]["created"],
Submission.objects.order_by("-created").last().created.astimezone(
pytz.timezone("Africa/Nairobi")).isoformat(),
)
def test_task_id_sorting(self):
"""
Test sorting by task id
"""
user = mommy.make("auth.User")
task = mommy.make("tasking.Task")
mommy.make("tasking.Task", _quantity=39) # increase task id counter
task2 = mommy.make("tasking.Task")
# create a bunch of submissions
mommy.make("tasking.Submission", _quantity=17, task=task)
# create one submission using task2
mommy.make("tasking.Submission", task=task2)
view = SubmissionViewSet.as_view({"get": "list"})
# test task id sorting
request = self.factory.get("/submissions", {"ordering": "-task__id"})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 18)
# pylint: disable=no-member
self.assertEqual(response.data[0]["id"],
Submission.objects.order_by("-task__id").first().id)
self.assertEqual(response.data[0]["task"], task2.id)
def test_list_submissions(self):
"""
Test GET /submissions listing of submissions.
"""
user = mommy.make("auth.User")
submission_data = self._create_submission()
view = SubmissionViewSet.as_view({"get": "list"})
request = self.factory.get("/submissions")
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertDictEqual(response.data.pop(), submission_data)
def test_retrieve_submission(self):
"""
Test GET /submissions/[pk] return a submission matching pk.
"""
user = mommy.make('auth.User')
submission_data = self._create_submission()
view = SubmissionViewSet.as_view({'get': 'retrieve'})
request = self.factory.get(
'/submissions/{id}'.format(id=submission_data['id']))
force_authenticate(request, user=user)
response = view(request=request, pk=submission_data['id'])
self.assertEqual(response.status_code, 200)
self.assertDictEqual(response.data, submission_data)
def test_retrieve_submission(self):
"""
Test GET /submissions/[pk] return a submission matching pk.
"""
user = mommy.make("auth.User")
submission_data = self._create_submission()
submission_id = submission_data["id"]
view = SubmissionViewSet.as_view({"get": "retrieve"})
request = self.factory.get(f"/submissions/{submission_id}")
force_authenticate(request, user=user)
response = view(request=request, pk=submission_id)
self.assertEqual(response.status_code, 200)
self.assertDictEqual(response.data, submission_data)
def test_delete_submissions(self):
"""
Test DELETE submissions.
"""
user = mommy.make("auth.User")
submission = mommy.make("tasking.Submission")
# assert that submission exists
# pylint: disable=no-member
self.assertTrue(Submission.objects.filter(pk=submission.id).exists())
# delete submission
view = SubmissionViewSet.as_view({"delete": "destroy"})
request = self.factory.delete(f"/submissions/{submission.id}")
force_authenticate(request, user=user)
response = view(request=request, pk=submission.id)
# assert that submission was deleted
self.assertEqual(response.status_code, 204)
self.assertFalse(Submission.objects.filter(pk=submission.id).exists())
def test_submission_time_sorting(self):
"""
Test that you can sort by submission_time
"""
now = timezone.now()
user = mommy.make("auth.User")
# make some submissions
for i in range(0, 7):
mommy.make("tasking.Submission",
submission_time=now - timedelta(days=i))
view = SubmissionViewSet.as_view({"get": "list"})
# test sorting
request = self.factory.get("/submissions",
{"ordering": "-submission_time"})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
# we have the expected number of records
self.assertEqual(len(response.data), 7)
# the first record is what we expect
# pylint: disable=no-member
self.assertEqual(
response.data[0]["id"],
Submission.objects.order_by("-submission_time").first().id,
)
self.assertEqual(
response.data[0]["submission_time"],
Submission.objects.order_by(
"-submission_time").first().submission_time.astimezone(
pytz.timezone("Africa/Nairobi")).isoformat(),
)
# the last record is what we epxect
self.assertEqual(
response.data[-1]["id"],
Submission.objects.order_by("-submission_time").last().id,
)
self.assertEqual(
response.data[-1]["submission_time"],
Submission.objects.order_by(
"-submission_time").last().submission_time.astimezone(
pytz.timezone("Africa/Nairobi")).isoformat(),
)
def test_submission_time_sorting(self):
"""
Test that you can sort by submission_time
"""
now = timezone.now()
user = mommy.make('auth.User')
# make some submissions
for i in range(0, 7):
mommy.make('tasking.Submission', submission_time=now -
timedelta(days=i))
view = SubmissionViewSet.as_view({'get': 'list'})
# test sorting
request = self.factory.get(
'/submissions', {'ordering': '-submission_time'})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
# we have the expected number of records
self.assertEqual(len(response.data), 7)
# the first record is what we expect
# pylint: disable=no-member
self.assertEqual(
response.data[0]['id'],
Submission.objects.order_by('-submission_time').first().id)
self.assertEqual(
response.data[0]['submission_time'],
Submission.objects.order_by(
'-submission_time').first().submission_time.astimezone(
pytz.timezone('Africa/Nairobi')).isoformat())
# the last record is what we epxect
self.assertEqual(
response.data[-1]['id'],
Submission.objects.order_by('-submission_time').last().id)
self.assertEqual(
response.data[-1]['submission_time'],
Submission.objects.order_by(
'-submission_time').last().submission_time.astimezone(
pytz.timezone('Africa/Nairobi')).isoformat())
def _create_submission(self):
"""
Helper to create a single submission
"""
now = timezone.now()
mocked_target_object = mommy.make('auth.User')
mocked_task = mommy.make('tasking.Task', name='Cow Prices')
mocked_location = mommy.make('tasking.Location', name='Nairobi')
mocked_user = mommy.make('auth.User')
data = {
'task': mocked_task.id,
'location': mocked_location.id,
'submission_time': now,
'user': mocked_user.id,
'comments': 'Approved',
'status': Submission.APPROVED,
'valid': True,
'target_content_type': self.user_type.id,
'target_id': mocked_target_object.id,
}
view = SubmissionViewSet.as_view({'post': 'create'})
request = self.factory.post('/submissions', data)
# Need authenticated user
force_authenticate(request, user=mocked_user)
response = view(request=request)
# Convert start to an isoformat
data['submission_time'] = now.astimezone(
pytz.timezone('Africa/Nairobi')).isoformat()
self.assertEqual(response.status_code, 201, response.data)
self.assertEqual(mocked_task.id, response.data['task'])
self.assertEqual(mocked_location.id, response.data['location'])
self.assertEqual(mocked_user.id, response.data['user'])
self.assertDictContainsSubset(data, response.data)
return response.data
def _create_submission(self):
"""
Helper to create a single submission
"""
now = timezone.now()
mocked_target_object = mommy.make("auth.User")
mocked_task = mommy.make("tasking.Task", name="Cow Prices")
mocked_location = mommy.make("tasking.Location", name="Nairobi")
mocked_user = mommy.make("auth.User")
data = {
"task": mocked_task.id,
"location": mocked_location.id,
"submission_time": now,
"user": mocked_user.id,
"comments": "Approved",
"status": Submission.APPROVED,
"valid": True,
"target_content_type": self.user_type.id,
"target_id": mocked_target_object.id,
}
view = SubmissionViewSet.as_view({"post": "create"})
request = self.factory.post("/submissions", data)
# Need authenticated user
force_authenticate(request, user=mocked_user)
response = view(request=request)
# Convert start to an isoformat
data["submission_time"] = now.astimezone(
pytz.timezone("Africa/Nairobi")).isoformat()
self.assertEqual(response.status_code, 201, response.data)
self.assertEqual(mocked_task.id, response.data["task"])
self.assertEqual(mocked_location.id, response.data["location"])
self.assertEqual(mocked_user.id, response.data["user"])
self.assertDictContainsSubset(data, response.data)
return response.data
def test_created_sorting(self):
"""
Test sorting by created
"""
user = mommy.make('auth.User')
# create a bunch of submissions
mommy.make('tasking.Submission', _quantity=100)
# check that we have 8 submissions
# pylint: disable=no-member
self.assertEqual(Submission.objects.all().count(), 100)
view = SubmissionViewSet.as_view({'get': 'list'})
# test sorting by created
request = self.factory.get('/submissions', {'ordering': '-created'})
force_authenticate(request, user=user)
response = view(request=request)
self.assertEqual(response.status_code, 200)
self.assertEqual(len(response.data), 100)
self.assertEqual(
response.data[0]['id'],
Submission.objects.order_by('-created').first().id)
self.assertEqual(
response.data[0]['created'],
Submission.objects.order_by(
'-created').first().created.astimezone(
pytz.timezone('Africa/Nairobi')).isoformat())
self.assertEqual(
response.data[-1]['id'],
Submission.objects.order_by('-created').last().id)
self.assertEqual(
response.data[-1]['created'],
Submission.objects.order_by(
'-created').last().created.astimezone(
pytz.timezone('Africa/Nairobi')).isoformat())
def test_create_with_bad_data(self):
"""
Test that we get appropriate errors when trying to create an object
with bad data
"""
bob_user = mommy.make("auth.User")
alice_user = mommy.make("auth.User")
now = timezone.now()
mocked_target_object = mommy.make("auth.User")
mocked_task = mommy.make("tasking.Task", name="Cow Prices")
mocked_location = mommy.make("tasking.Location", name="Nairobi")
mocked_user = mommy.make("auth.User", username="******")
bad_target_id = dict(
task=mocked_task.id,
location=mocked_location.id,
submission_time=now,
user=mocked_user.id,
comments="Approved",
status=Submission.APPROVED,
valid=True,
target_content_type=self.user_type.id,
target_id=5487,
)
view1 = SubmissionViewSet.as_view({"post": "create"})
request1 = self.factory.post("/submissions", bad_target_id)
# Need authenticated user
force_authenticate(request1, user=bob_user)
response1 = view1(request=request1)
self.assertEqual(response1.status_code, 400)
self.assertIn("target_id", response1.data.keys())
self.assertEqual(TARGET_DOES_NOT_EXIST,
str(response1.data["target_id"][0]))
bad_content_type = dict(
task=mocked_task.id,
location=mocked_location.id,
submission_time=now,
user=mocked_user.id,
comments="Approved",
status=Submission.APPROVED,
valid=True,
target_content_type=999,
target_id=mocked_target_object.id,
)
view2 = SubmissionViewSet.as_view({"post": "create"})
request2 = self.factory.post("/submissions", bad_content_type)
# Need authenticated user
force_authenticate(request2, user=alice_user)
response2 = view2(request=request2)
self.assertEqual(response2.status_code, 400)
self.assertIn("target_content_type", response2.data.keys())
self.assertEqual(
'Invalid pk "999" - object does not exist.',
str(response2.data["target_content_type"][0]),
)
def test_authentication_required(self):
"""
Test that authentication is required for all viewset actions
"""
now = timezone.now()
mocked_target_object = mommy.make('auth.User')
mocked_task = mommy.make('tasking.Task', name='Cow Prices')
mocked_location = mommy.make('tasking.Location', name='Nairobi')
mocked_user = mommy.make('auth.User')
submission = mommy.make('tasking.Submission')
data = {
'task': mocked_task.id,
'location': mocked_location.id,
'submission_time': now,
'user': mocked_user.id,
'comments': 'Approved',
'status': Submission.APPROVED,
'valid': True,
'target_content_type': self.user_type.id,
'target_id': mocked_target_object.id,
}
# test that you need authentication for creating a submission
view = SubmissionViewSet.as_view({'post': 'create'})
request = self.factory.post('/submissions', data)
response = view(request=request)
self.assertEqual(response.status_code, 403)
self.assertEqual(
'Authentication credentials were not provided.',
six.text_type(response.data['detail']))
# test that you need authentication for retrieving a submission
view2 = SubmissionViewSet.as_view({'get': 'retrieve'})
request2 = self.factory.get(
'/submissions/{id}'.format(id=submission.id))
response2 = view2(request=request2, pk=submission.id)
self.assertEqual(response2.status_code, 403)
self.assertEqual(
'Authentication credentials were not provided.',
six.text_type(response2.data['detail']))
# test that you need authentication for listing submissions
view3 = SubmissionViewSet.as_view({'get': 'list'})
request3 = self.factory.get('/submissions')
response3 = view3(request=request3)
self.assertEqual(response3.status_code, 403)
self.assertEqual(
'Authentication credentials were not provided.',
six.text_type(response3.data['detail']))
# test that you need authentication for deleting a submission
# pylint: disable=no-member
self.assertTrue(
Submission.objects.filter(pk=submission.id).exists())
view4 = SubmissionViewSet.as_view({'delete': 'destroy'})
request4 = self.factory.delete(
'/submissions/{id}'.format(id=submission.id))
response4 = view4(request=request4, pk=submission.id)
self.assertEqual(response4.status_code, 403)
self.assertEqual(
'Authentication credentials were not provided.',
six.text_type(response4.data['detail']))
# test that you need authentication for updating a submission
data = {
'status': Submission.REJECTED,
}
view5 = SubmissionViewSet.as_view({'patch': 'partial_update'})
request5 = self.factory.patch(
'/submissions/{id}'.format(id=submission.id), data=data)
response5 = view5(request=request5, pk=submission.id)
self.assertEqual(response5.status_code, 403)
self.assertEqual(
'Authentication credentials were not provided.',
six.text_type(response5.data['detail']))
def test_create_with_bad_data(self):
"""
Test that we get appropriate errors when trying to create an object
with bad data
"""
bob_user = mommy.make('auth.User')
alice_user = mommy.make('auth.User')
now = timezone.now()
mocked_target_object = mommy.make('auth.User')
mocked_task = mommy.make('tasking.Task', name='Cow Prices')
mocked_location = mommy.make('tasking.Location', name='Nairobi')
mocked_user = mommy.make('auth.User', username='******')
bad_target_id = dict(
task=mocked_task.id,
location=mocked_location.id,
submission_time=now,
user=mocked_user.id,
comments='Approved',
status=Submission.APPROVED,
valid=True,
target_content_type=self.user_type.id,
target_id=5487,
)
view1 = SubmissionViewSet.as_view({'post': 'create'})
request1 = self.factory.post('/submissions', bad_target_id)
# Need authenticated user
force_authenticate(request1, user=bob_user)
response1 = view1(request=request1)
self.assertEqual(response1.status_code, 400)
self.assertIn('target_id', response1.data.keys())
self.assertEqual(TARGET_DOES_NOT_EXIST,
six.text_type(response1.data['target_id'][0]))
bad_content_type = dict(
task=mocked_task.id,
location=mocked_location.id,
submission_time=now,
user=mocked_user.id,
comments='Approved',
status=Submission.APPROVED,
valid=True,
target_content_type=999,
target_id=mocked_target_object.id,
)
view2 = SubmissionViewSet.as_view({'post': 'create'})
request2 = self.factory.post('/submissions', bad_content_type)
# Need authenticated user
force_authenticate(request2, user=alice_user)
response2 = view2(request=request2)
self.assertEqual(response2.status_code, 400)
self.assertIn('target_content_type', response2.data.keys())
self.assertEqual(
'Invalid pk "999" - object does not exist.',
six.text_type(response2.data['target_content_type'][0]))
def test_authentication_required(self):
"""
Test that authentication is required for all viewset actions
"""
now = timezone.now()
mocked_target_object = mommy.make("auth.User")
mocked_task = mommy.make("tasking.Task", name="Cow Prices")
mocked_location = mommy.make("tasking.Location", name="Nairobi")
mocked_user = mommy.make("auth.User")
submission = mommy.make("tasking.Submission")
data = {
"task": mocked_task.id,
"location": mocked_location.id,
"submission_time": now,
"user": mocked_user.id,
"comments": "Approved",
"status": Submission.APPROVED,
"valid": True,
"target_content_type": self.user_type.id,
"target_id": mocked_target_object.id,
}
# test that you need authentication for creating a submission
view = SubmissionViewSet.as_view({"post": "create"})
request = self.factory.post("/submissions", data)
response = view(request=request)
self.assertEqual(response.status_code, 403)
self.assertEqual(
"Authentication credentials were not provided.",
str(response.data["detail"]),
)
# test that you need authentication for retrieving a submission
view2 = SubmissionViewSet.as_view({"get": "retrieve"})
request2 = self.factory.get(f"/submissions/{submission.id}")
response2 = view2(request=request2, pk=submission.id)
self.assertEqual(response2.status_code, 403)
self.assertEqual(
"Authentication credentials were not provided.",
str(response2.data["detail"]),
)
# test that you need authentication for listing submissions
view3 = SubmissionViewSet.as_view({"get": "list"})
request3 = self.factory.get("/submissions")
response3 = view3(request=request3)
self.assertEqual(response3.status_code, 403)
self.assertEqual(
"Authentication credentials were not provided.",
str(response3.data["detail"]),
)
# test that you need authentication for deleting a submission
# pylint: disable=no-member
self.assertTrue(Submission.objects.filter(pk=submission.id).exists())
view4 = SubmissionViewSet.as_view({"delete": "destroy"})
request4 = self.factory.delete(f"/submissions/{submission.id}")
response4 = view4(request=request4, pk=submission.id)
self.assertEqual(response4.status_code, 403)
self.assertEqual(
"Authentication credentials were not provided.",
str(response4.data["detail"]),
)
# test that you need authentication for updating a submission
data = {
"status": Submission.REJECTED,
}
view5 = SubmissionViewSet.as_view({"patch": "partial_update"})
request5 = self.factory.patch(f"/submissions/{submission.id}",
data=data)
response5 = view5(request=request5, pk=submission.id)
self.assertEqual(response5.status_code, 403)
self.assertEqual(
"Authentication credentials were not provided.",
str(response5.data["detail"]),
)