def test_create_post(self):
"""Can we submit a form to create NewsLinks?"""
newslink_num = NewsLink.objects.count()
startup = StartupFactory()
newslink_data = {
**omit_keys(
"id",
get_instance_data(NewsLinkFactory.build()),
),
"startup":
startup.pk,
}
with perm_user(self, "organizer.add_newslink"):
response = self.post(
"newslink_create",
startup_slug=startup.slug,
data=newslink_data,
)
self.assertEqual(
NewsLink.objects.count(),
newslink_num + 1,
response.content.decode("utf8"),
)
newslink = NewsLink.objects.get(slug=newslink_data["slug"])
self.assertEqual(startup.pk, newslink.startup.pk)
self.assertRedirects(response, newslink.get_absolute_url())
def test_delete_post(self):
"""Can we submit a form to delete a Startup?"""
startup = StartupFactory()
with perm_user(self, "organizer.delete_startup"):
response = self.post("startup_delete", slug=startup.slug)
self.assertRedirects(response, reverse("startup_list"))
self.assertFalse(Startup.objects.filter(pk=startup.pk).exists())
def test_create_get(self):
"""Can we view the form to create NewsLinks?"""
startup = StartupFactory()
url_name = "newslink_create"
self.get(url_name, startup_slug=startup.slug)
self.response_302()
with auth_user(self):
self.get(url_name, startup_slug=startup.slug)
self.response_403()
with perm_user(self, "organizer.add_newslink"):
response = self.get_check_200(url_name, startup_slug=startup.slug)
form = self.get_context("form")
self.assertIsInstance(form, NewsLinkForm)
initial_startup_pk = form.initial.get("startup")
self.assertIsNotNone(
initial_startup_pk,
"An initial value for the Startup must be "
"provided to the NewsLinkForm",
)
self.assertEqual(
startup.pk,
initial_startup_pk,
f"Startup FK {startup.pk} not set in form, "
f"found {initial_startup_pk} in form instead",
)
context_startup = self.get_context("startup")
self.assertEqual(startup.pk, context_startup.pk)
self.assertContext("update", False)
self.assertTemplateUsed(response, "newslink/form.html")
self.assertTemplateUsed(response, "newslink/base.html")
self.assertTemplateUsed(response, "base.html")
def test_update_post_malicious_form(self):
"""Can we maliciously change startups in NewsLink update?"""
startup1 = StartupFactory()
startup2 = StartupFactory()
newslink = NewsLinkFactory(startup=startup1)
new_title = "django"
self.assertNotEqual(newslink.title, new_title)
newslink_data = {
**omit_keys("id", get_instance_data(newslink)),
"title": new_title,
"startup": startup2.pk,
}
with perm_user(self, "organizer.change_newslink"):
response = self.post(
"newslink_update",
startup_slug=startup1.slug,
newslink_slug=newslink.slug,
data=newslink_data,
)
self.response_400()
# ensure NewsLink _not_ update
newslink.refresh_from_db()
self.assertNotEqual(
newslink.title,
new_title,
response.content.decode("utf8"),
)
def test_update_get(self):
"""Can we view a form to update newslinks?"""
startup = StartupFactory()
newslink = NewsLinkFactory(startup=startup)
url_name = "newslink_update"
self.get(
url_name,
startup_slug=startup.slug,
newslink_slug=newslink.slug,
)
self.response_302()
with auth_user(self):
self.get(
url_name,
startup_slug=startup.slug,
newslink_slug=newslink.slug,
)
self.response_403()
with perm_user(self, "organizer.change_newslink"):
response = self.get_check_200(
url_name,
startup_slug=startup.slug,
newslink_slug=newslink.slug,
)
form = self.get_context("form")
self.assertIsInstance(form, NewsLinkForm)
context_newslink = self.get_context("newslink")
context_startup = self.get_context("startup")
self.assertEqual(newslink.pk, context_newslink.pk)
self.assertEqual(startup.pk, context_startup.pk)
self.assertContext("update", True)
self.assertTemplateUsed(response, "newslink/form.html")
self.assertTemplateUsed(response, "newslink/base.html")
self.assertTemplateUsed(response, "base.html")
def test_delete_get(self):
"""Can we view a form to delete a Post?"""
post = PostFactory()
url_name = "post_delete"
self.get(
url_name,
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
)
self.response_302()
with auth_user(self):
self.get(
url_name,
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
)
self.response_403()
with perm_user(self, "blog.delete_post"):
response = self.get_check_200(
url_name,
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
)
context_post = self.get_context("post")
self.assertEqual(post.pk, context_post.pk)
self.assertTemplateUsed(
response, "post/confirm_delete.html"
)
self.assertTemplateUsed(
response, "post/base.html"
)
self.assertTemplateUsed(response, "base.html")
def test_delete_get(self):
"""Can we view a form to delete a NewsLink?"""
startup = StartupFactory()
newslink = NewsLinkFactory(startup=startup)
url_name = "newslink_delete"
self.get(
url_name,
startup_slug=startup.slug,
newslink_slug=newslink.slug,
)
self.response_302()
with auth_user(self):
self.get(
url_name,
startup_slug=startup.slug,
newslink_slug=newslink.slug,
)
self.response_403()
with perm_user(self, "organizer.delete_newslink"):
response = self.get_check_200(
url_name,
startup_slug=startup.slug,
newslink_slug=newslink.slug,
)
context_newslink = self.get_context("newslink")
context_startup = self.get_context("startup")
self.assertEqual(newslink.pk, context_newslink.pk)
self.assertEqual(startup.pk, context_startup.pk)
self.assertTemplateUsed(response, "newslink/confirm_delete.html")
self.assertTemplateUsed(response, "newslink/base.html")
self.assertTemplateUsed(response, "base.html")
def test_tag_delete_post(self):
"""Can we submit a form to delete a Tag?"""
tag = TagFactory()
with perm_user(self, "organizer.delete_tag"):
response = self.post("tag_delete", slug=tag.slug)
self.assertRedirects(response, reverse("tag_list"))
self.assertFalse(Tag.objects.filter(slug=tag.slug).exists())
def test_update_post(self):
"""Can we submit a form to update posts?"""
with perm_user(self, "blog.change_post"):
post = PostFactory(
tags=TagFactory.create_batch(randint(1, 5)),
startups=StartupFactory.create_batch(
randint(1, 5)
),
)
self.assertNotEqual(post.title, "django")
post_data = omit_keys(
"id", get_instance_data(post)
)
response = self.post(
"post_update",
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
data=dict(post_data, title="django"),
)
post.refresh_from_db()
self.assertEqual(
post.title,
"django",
response.content.decode("utf8"),
)
self.assertRedirects(
response, post.get_absolute_url()
)
def test_create_post_malicious_form(self):
"""Can we maliciously change startups in NewsLink create?"""
newslink_num = NewsLink.objects.count()
startup1 = StartupFactory()
startup2 = StartupFactory()
newslink_data = {
**omit_keys(
"id",
get_instance_data(NewsLinkFactory.build()),
),
"startup":
startup1.pk,
}
with perm_user(self, "organizer.add_newslink"):
response = self.post(
"newslink_create",
startup_slug=startup2.slug,
data=newslink_data,
)
self.response_400()
# ensure NewsLink _not_ created
self.assertEqual(
NewsLink.objects.count(),
newslink_num,
response.content.decode("utf8"),
)
def test_create_post(self):
"""Can we submit a form to create Posts?"""
with perm_user(self, "blog.add_post"):
post_num = Post.objects.count()
tag = TagFactory()
startup = StartupFactory()
post_data = {
**omit_keys(
"id",
get_instance_data(PostFactory.build()),
),
"tags": [tag.pk],
"startups": [startup.pk],
}
self.assertFalse(
Post.objects.filter(
slug=post_data["slug"]
).exists()
)
response = self.post(
"post_create", data=post_data
)
self.assertEqual(
Post.objects.count(),
post_num + 1,
response.content.decode("utf8"),
)
post = Post.objects.get(slug=post_data["slug"])
self.assertIn(tag, post.tags.all())
self.assertIn(startup, post.startups.all())
self.assertRedirects(
response, post.get_absolute_url()
)
def test_tag_create_post(self):
"""Can we submit a form to create tags?"""
with perm_user(self, "organizer.add_tag"):
self.assertEqual(Tag.objects.count(), 0)
tag_data = omit_keys("id", get_instance_data(TagFactory.build()))
response = self.post("tag_create", data=tag_data)
self.assertEqual(Tag.objects.count(), 1, response.content)
tag = Tag.objects.get(slug=slugify(tag_data["name"]))
self.assertRedirects(response, tag.get_absolute_url())
def test_delete_post(self):
"""Can we submit a form to delete a NewsLink?"""
startup = StartupFactory()
newslink = NewsLinkFactory(startup=startup)
with perm_user(self, "organizer.delete_newslink"):
response = self.post(
"newslink_delete",
startup_slug=startup.slug,
newslink_slug=newslink.slug,
)
self.assertRedirects(response, startup.get_absolute_url())
self.assertFalse(NewsLink.objects.filter(pk=newslink.pk).exists())
def test_tag_update_post(self):
"""Can we submit a form to update tags?"""
tag = TagFactory()
self.assertNotEqual(tag.name, "django")
tag_data = omit_keys("id", "name", get_instance_data(tag))
with perm_user(self, "organizer.change_tag"):
response = self.post(
"tag_update",
slug=tag.slug,
data=dict(**tag_data, name="django"),
)
tag.refresh_from_db()
self.assertEqual(tag.name, "django", response.content)
self.assertRedirects(response, tag.get_absolute_url())
def test_tag_delete_get(self):
"""Can we view a form to delete a Tag?"""
tag = TagFactory()
url_name = "tag_delete"
self.get(url_name, slug=tag.slug)
self.response_302()
with auth_user(self):
self.get(url_name, slug=tag.slug)
self.response_403()
with perm_user(self, "organizer.delete_tag"):
response = self.get_check_200(url_name, slug=tag.slug)
context_tag = self.get_context("tag")
self.assertEqual(tag.pk, context_tag.pk)
self.assertTemplateUsed(response, "tag/confirm_delete.html")
self.assertTemplateUsed(response, "tag/base.html")
self.assertTemplateUsed(response, "base.html")
def test_delete_post(self):
"""Can we submit a form to delete a Post?"""
with perm_user(self, "blog.delete_post"):
post = PostFactory()
response = self.post(
"post_delete",
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
)
self.assertRedirects(
response, reverse("post_list")
)
self.assertFalse(
Post.objects.filter(pk=post.pk).exists()
)
def test_delete_get(self):
"""Can we view a form to delete a Startup?"""
startup = StartupFactory()
url_name = "startup_delete"
self.get(url_name, slug=startup.slug)
self.response_302()
with auth_user(self):
self.get(url_name, slug=startup.slug)
self.response_403()
with perm_user(self, "organizer.delete_startup"):
response = self.get_check_200(url_name, slug=startup.slug)
context_startup = self.get_context("startup")
self.assertEqual(startup.pk, context_startup.pk)
self.assertTemplateUsed(response, "startup/confirm_delete.html")
self.assertTemplateUsed(response, "startup/base.html")
self.assertTemplateUsed(response, "base.html")
def test_tag_create_get(self):
"""Can we view a form to create Tags?"""
url_name = "tag_create"
self.get(url_name)
self.response_302()
with auth_user(self):
self.get(url_name)
self.response_403()
with perm_user(self, "organizer.add_tag"):
response = self.get_check_200(url_name)
form = self.get_context("form")
self.assertIsInstance(form, TagForm)
self.assertContext("update", False)
self.assertTemplateUsed(response, "tag/form.html")
self.assertTemplateUsed(response, "tag/base.html")
self.assertTemplateUsed(response, "base.html")
def test_update_post(self):
"""Can we submit a form to update startups?"""
startup = StartupFactory(tags=TagFactory.create_batch(randint(1, 5)))
self.assertNotEqual(startup.name, "django")
startup_data = omit_keys("id", get_instance_data(startup))
with perm_user(self, "organizer.change_startup"):
response = self.post(
"startup_update",
slug=startup.slug,
data=dict(startup_data, name="django"),
)
startup.refresh_from_db()
self.assertEqual(
startup.name,
"django",
response.content.decode("utf8"),
)
self.assertRedirects(response, startup.get_absolute_url())
def test_tag_update_get(self):
"""Can we view a form to update Tags?"""
tag = TagFactory()
url_name = "tag_update"
self.get(url_name, slug=tag.slug)
self.response_302()
with auth_user(self):
self.get(url_name, slug=tag.slug)
self.response_403()
with perm_user(self, "organizer.change_tag"):
response = self.get_check_200(url_name, slug=tag.slug)
form = self.get_context("form")
self.assertIsInstance(form, TagForm)
context_tag = self.get_context("tag")
self.assertEqual(tag.pk, context_tag.pk)
self.assertContext("update", True)
self.assertTemplateUsed(response, "tag/form.html")
self.assertTemplateUsed(response, "tag/base.html")
self.assertTemplateUsed(response, "base.html")
def test_update_get(self):
"""Can we view a form to update startups?"""
startup = StartupFactory()
url_name = "startup_update"
self.get(url_name, slug=startup.slug)
self.response_302()
with auth_user(self):
self.get(url_name, slug=startup.slug)
self.response_403()
with perm_user(self, "organizer.change_startup"):
response = self.get_check_200(url_name, slug=startup.slug)
form = self.get_context("form")
self.assertIsInstance(form, StartupForm)
context_startup = self.get_context("startup")
self.assertEqual(startup.pk, context_startup.pk)
self.assertContext("update", True)
self.assertTemplateUsed(response, "startup/form.html")
self.assertTemplateUsed(response, "startup/base.html")
self.assertTemplateUsed(response, "base.html")
def test_create_get(self):
"""Can we view the form to create Posts?"""
url_name = "post_create"
self.get(url_name)
self.response_302()
with auth_user(self):
self.get(url_name)
self.response_403()
with perm_user(self, "blog.add_post"):
response = self.get_check_200(url_name)
form = self.get_context("form")
self.assertIsInstance(form, PostForm)
self.assertContext("update", False)
self.assertTemplateUsed(
response, "post/form.html"
)
self.assertTemplateUsed(
response, "post/base.html"
)
self.assertTemplateUsed(response, "base.html")
def test_update_post(self):
"""Can we submit a form to update newslinks?"""
startup = StartupFactory()
newslink = NewsLinkFactory(startup=startup)
self.assertNotEqual(newslink.title, "django")
newslink_data = omit_keys("id", get_instance_data(newslink))
with perm_user(self, "organizer.change_newslink"):
response = self.post(
"newslink_update",
startup_slug=startup.slug,
newslink_slug=newslink.slug,
data=dict(newslink_data, title="django"),
)
newslink.refresh_from_db()
self.assertEqual(
newslink.title,
"django",
response.content.decode("utf8"),
)
self.assertRedirects(response, newslink.get_absolute_url())
def test_create_post(self):
"""Can we submit a form to create Startups?"""
startup_num = Startup.objects.count()
tag = TagFactory()
startup_data = {
**omit_keys(
"id",
get_instance_data(StartupFactory.build()),
),
"tags": [tag.pk],
}
with perm_user(self, "organizer.add_startup"):
response = self.post("startup_create", data=startup_data)
self.assertEqual(
Startup.objects.count(),
startup_num + 1,
response.content.decode("utf8"),
)
startup = Startup.objects.get(slug=startup_data["slug"])
self.assertIn(tag, startup.tags.all())
self.assertRedirects(response, startup.get_absolute_url())
def test_update_get(self):
"""Can we view a form to update posts?"""
post = PostFactory()
url_name = "post_update"
self.get(
url_name,
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
)
self.response_302()
with auth_user(self):
self.get(
url_name,
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
)
self.response_403()
with perm_user(self, "blog.change_post"):
response = self.get_check_200(
url_name,
year=post.pub_date.year,
month=post.pub_date.month,
slug=post.slug,
)
form = self.get_context("form")
self.assertIsInstance(form, PostForm)
context_post = self.get_context("post")
self.assertEqual(post.pk, context_post.pk)
self.assertContext("update", True)
self.assertTemplateUsed(
response, "post/form.html"
)
self.assertTemplateUsed(
response, "post/base.html"
)
self.assertTemplateUsed(response, "base.html")
