def test_users_cannot_delete_tasks_that_are_not_created_by_them(self):
self.app.get('tasks', follow_redirects=True)
create_task(self)
logout(self)
create_user(self, 'Fletcher', '*****@*****.**', 'python101')
login(self, 'Fletcher', 'python101')
self.app.get('tasks/', follow_redirects=True)
response = self.app.get("delete/1/", follow_redirects=True)
self.assertIn(b'You can only delete tasks that belong to you.',
response.data)
def test_admin_users_can_delete_tasks_that_are_not_created_by_them(self):
self.app.get('tasks/', follow_redirects=True)
create_task(self)
logout(self)
create_admin_user(self)
login(self, 'AdminUser', 'allpowerful')
self.app.get('tasks/', follow_redirects=True)
response = self.app.get('delete/1/', follow_redirects=True)
self.assertNotIn(b'You can only delete tasks that belong to you.',
response.data)
def test_users_can_see_task_modify_links_for_tasks_created_by_them(self):
login(self, 'Michael', 'python')
self.app.get('tasks/', follow_redirects=True)
create_task(self)
logout(self)
register(self, 'Fletcher', '*****@*****.**', 'python101',
'python101')
login(self, 'Fletcher', 'python101')
self.app.get('tasks/', follow_redirects=True)
response = create_task(self)
self.assertIn(b'complete/2/', response.data)
self.assertIn(b'complete/2/', response.data)
def test_admin_users_can_see_task_modify_links_for_all_tasks(self):
login(self, 'Michael', 'python')
self.app.get('tasks/', follow_redirects=True)
create_task(self)
logout(self)
create_admin_user(self)
login(self, 'AdminUser', 'allpowerful')
self.app.get('tasks/', follow_redirects=True)
response = create_task(self)
self.assertIn(b'complete/1/', response.data)
self.assertIn(b'delete/1/', response.data)
self.assertIn(b'complete/2/', response.data)
self.assertIn(b'delete/2/', response.data)
def setUp(self):
app.config['TESTING'] = True
app.config['WTF_CSRF_ENABLED'] = False
app.config['DEBUG'] = False
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///' + os.path.join(
basedir, TEST_DB)
self.app = app.test_client()
db.create_all()
self.assertEquals(app.debug, False)
register(self, 'Micheal', '*****@*****.**', 'python', 'python')
login(self, 'Micheal', 'python')
def test_task_template_displays_logged_in_user_name(self):
login(self, 'Michael', 'python')
response = self.app.get('tasks/', follow_redirects=True)
self.assertIn(b'Michael', response.data)
def test_logged_in_users_can_logout(self):
login(self, 'Michael', 'python')
response = logout(self)
self.assertIn(b'Goodbye!', response.data)
def test_users_login(self):
response = login(self, 'foo', 'bar')
self.assertIn(b'Invalid username or password', response.data)
response = login(self, 'Michael', 'python')
self.assertIn(b'Welcome!', response.data)
def test_invalid_form_data(self):
logout(self)
response = login(self, 'alert("alert box!");', 'foo')
self.assertIn(b'Invalid username or password.', response.data)
