def test_view_downloadSubmission(self):
view = BriefcaseApi.as_view({'get': 'retrieve'})
self._publish_xml_form()
self.maxDiff = None
self._submit_transport_instance_w_attachment()
instanceId = u'5b2cc313-fc09-437e-8149-fcd32f695d41'
instance = Instance.objects.get(uuid=instanceId)
formId = u'%(formId)s[@version=null and @uiVersion=null]/' \
u'%(formId)s[@key=uuid:%(instanceId)s]' % {
'formId': self.xform.id_string,
'instanceId': instanceId}
params = {'formId': formId}
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.get(
self._download_submission_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
text = "uuid:%s" % instanceId
download_submission_path = os.path.join(
self.main_directory, 'fixtures', 'transportation',
'view', 'downloadSubmission.xml')
with codecs.open(download_submission_path, encoding='utf-8') as f:
text = f.read()
text = text.replace(u'{{submissionDate}}',
instance.date_created.isoformat())
self.assertContains(response, instanceId, status_code=200)
self.assertMultiLineEqual(response.content, text)
def test_view_downloadSubmission_OtherUser(self):
view = BriefcaseApi.as_view({'get': 'retrieve'})
self._publish_xml_form()
self.maxDiff = None
self._submit_transport_instance_w_attachment()
instanceId = u'5b2cc313-fc09-437e-8149-fcd32f695d41'
formId = u'%(formId)s[@version=null and @uiVersion=null]/' \
u'%(formId)s[@key=uuid:%(instanceId)s]' % {
'formId': self.xform.id_string,
'instanceId': instanceId}
params = {'formId': formId}
# alice cannot view bob's downloadSubmission
alice_data = {'username': '******', 'email': '*****@*****.**'}
self._create_user_profile(alice_data)
auth = DigestAuth('alice', 'bobbob')
url = self._download_submission_url # aliasing long name
request = self.factory.get(url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
# Rewind the file to avoid the xml parser to get an empty string
# and throw and parsing error
request = request = self.factory.get(url, data=params)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 404)
def test_form_upload(self):
view = BriefcaseApi.as_view({'post': 'create'})
self._publish_xml_form()
with codecs.open(self.form_def_path, encoding='utf-8') as f:
params = {'form_def_file': f, 'dataFile': ''}
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
# Rewind the file to avoid the xml parser to get an empty string
# and throw and parsing error
f.seek(0)
# Create a new requests to avoid request.FILES to be empty
request = self.factory.post(self._form_upload_url, data=params)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 400)
self.assertEqual(
response.data,
{'message': u'Form with this id or SMS-keyword already exists.'
}
)
def test_view_submission_list(self):
view = BriefcaseApi.as_view({'get': 'list'})
self._publish_xml_form()
self._make_submissions()
request = self.factory.get(
self._submission_list_url,
data={'formId': self.xform.id_string})
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
auth = DigestAuth(self.login_username, self.login_password)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 200)
submission_list_path = os.path.join(
self.main_directory, 'fixtures', 'transportation',
'view', 'submissionList.xml')
instances = ordered_instances(self.xform)
self.assertEqual(instances.count(), NUM_INSTANCES)
last_index = instances[instances.count() - 1].pk
with codecs.open(submission_list_path, 'rb', encoding='utf-8') as f:
expected_submission_list = f.read()
expected_submission_list = \
expected_submission_list.replace(
'{{resumptionCursor}}', '%s' % last_index)
self.assertContains(response, expected_submission_list)
def test_view_submission_list_w_deleted_submission(self):
view = BriefcaseApi.as_view({'get': 'list'})
self._publish_xml_form()
self._make_submissions()
uuid = 'f3d8dc65-91a6-4d0f-9e97-802128083390'
Instance.objects.filter(uuid=uuid).order_by('id').delete()
request = self.factory.get(
self._submission_list_url,
data={'formId': self.xform.id_string})
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
auth = DigestAuth(self.login_username, self.login_password)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 200)
submission_list_path = os.path.join(
self.main_directory, 'fixtures', 'transportation',
'view', 'submissionList-4.xml')
instances = ordered_instances(self.xform)
self.assertEqual(instances.count(), NUM_INSTANCES - 1)
last_index = instances[instances.count() - 1].pk
with codecs.open(submission_list_path, 'rb', encoding='utf-8') as f:
expected_submission_list = f.read()
expected_submission_list = \
expected_submission_list.replace(
'{{resumptionCursor}}', '%s' % last_index)
self.assertContains(response, expected_submission_list)
view = BriefcaseApi.as_view({'get': 'retrieve'})
formId = u'%(formId)s[@version=null and @uiVersion=null]/' \
u'%(formId)s[@key=uuid:%(instanceId)s]' % {
'formId': self.xform.id_string,
'instanceId': uuid}
params = {'formId': formId}
request = self.factory.get(
self._download_submission_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
auth = DigestAuth(self.login_username, self.login_password)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertTrue(response.status_code, 404)
def test_view_submission_list_num_entries(self):
def get_last_index(xform, last_index=None):
instances = ordered_instances(xform)
if not last_index and instances.count():
return instances[instances.count() - 1].pk
elif last_index:
instances = instances.filter(pk__gt=last_index)
if instances.count():
return instances[instances.count() - 1].pk
else:
return get_last_index(xform)
return 0
view = BriefcaseApi.as_view({'get': 'list'})
self._publish_xml_form()
self._make_submissions()
params = {'formId': self.xform.id_string}
params['numEntries'] = 2
instances = ordered_instances(self.xform)
self.assertEqual(instances.count(), NUM_INSTANCES)
last_index = instances[:2][1].pk
last_expected_submission_list = ""
for index in range(1, 5):
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.get(
self._submission_list_url,
data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 200)
if index > 2:
last_index = get_last_index(self.xform, last_index)
filename = 'submissionList-%s.xml' % index
if index == 4:
self.assertContains(response, last_expected_submission_list)
continue
# set cursor for second request
params['cursor'] = last_index
submission_list_path = os.path.join(
self.main_directory, 'fixtures', 'transportation',
'view', filename)
with codecs.open(submission_list_path, encoding='utf-8') as f:
expected_submission_list = f.read()
last_expected_submission_list = expected_submission_list = \
expected_submission_list.replace(
'{{resumptionCursor}}', '%s' % last_index)
self.assertContains(response, expected_submission_list)
last_index += 2
def test_view_submission_list_w_deleted_submission(self):
view = BriefcaseApi.as_view({"get": "list"})
self._publish_xml_form()
self._make_submissions()
uuid = "f3d8dc65-91a6-4d0f-9e97-802128083390"
Instance.objects.filter(uuid=uuid).order_by("id").delete()
request = self.factory.get(self._submission_list_url, data={"formId": self.xform.id_string})
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
auth = DigestAuth(self.login_username, self.login_password)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 200)
submission_list_path = os.path.join(
self.main_directory, "fixtures", "transportation", "view", "submissionList-4.xml"
)
instances = ordered_instances(self.xform)
self.assertEqual(instances.count(), NUM_INSTANCES - 1)
last_index = instances[instances.count() - 1].pk
with codecs.open(submission_list_path, "rb", encoding="utf-8") as f:
expected_submission_list = f.read()
expected_submission_list = expected_submission_list.replace("{{resumptionCursor}}", "%s" % last_index)
self.assertContains(response, expected_submission_list)
view = BriefcaseApi.as_view({"get": "retrieve"})
formId = u"%(formId)s[@version=null and @uiVersion=null]/" u"%(formId)s[@key=uuid:%(instanceId)s]" % {
"formId": self.xform.id_string,
"instanceId": uuid,
}
params = {"formId": formId}
request = self.factory.get(self._download_submission_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
auth = DigestAuth(self.login_username, self.login_password)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertTrue(response.status_code, 404)
def test_upload_head_request(self):
view = BriefcaseApi.as_view({"head": "create"})
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.head(self._form_upload_url)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 204)
self.assertTrue(response.has_header("X-OpenRosa-Version"))
self.assertTrue(response.has_header("X-OpenRosa-Accept-Content-Length"))
self.assertTrue(response.has_header("Date"))
def test_upload_head_request(self):
view = BriefcaseApi.as_view({'head': 'create'})
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.head(self._form_upload_url)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 204)
self.assertTrue(response.has_header('X-OpenRosa-Version'))
self.assertTrue(
response.has_header('X-OpenRosa-Accept-Content-Length'))
self.assertTrue(response.has_header('Date'))
def test_view_submission_list_OtherUser(self):
view = BriefcaseApi.as_view({"get": "list"})
self._publish_xml_form()
self._make_submissions()
# alice cannot view bob's submissionList
alice_data = {"username": "******", "email": "*****@*****.**"}
self._create_user_profile(alice_data)
auth = DigestAuth("alice", "bobbob")
request = self.factory.get(self._submission_list_url, data={"formId": self.xform.id_string})
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 404)
def test_form_upload(self):
view = BriefcaseApi.as_view({"post": "create"})
self._publish_xml_form()
with codecs.open(self.form_def_path, encoding="utf-8") as f:
params = {"form_def_file": f, "dataFile": ""}
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 400)
self.assertEqual(response.data, {"message": u"Form with this id or SMS-keyword already exists."})
def test_publish_xml_form_where_filename_is_not_id_string(self):
view = BriefcaseApi.as_view({"post": "create"})
form_def_path = os.path.join(self.main_directory, "fixtures", "transportation", "Transportation Form.xml")
count = XForm.objects.count()
with codecs.open(form_def_path, encoding="utf-8") as f:
params = {"form_def_file": f, "dataFile": ""}
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(XForm.objects.count(), count + 1)
self.assertContains(response, "successfully published.", status_code=201)
def test_view_submission_list_OtherUser(self):
view = BriefcaseApi.as_view({'get': 'list'})
self._publish_xml_form()
self._make_submissions()
# alice cannot view bob's submissionList
alice_data = {'username': '******', 'email': '*****@*****.**'}
self._create_user_profile(alice_data)
auth = DigestAuth('alice', 'bobbob')
request = self.factory.get(self._submission_list_url,
data={'formId': self.xform.id_string})
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 404)
def _publish_xml_form(self, auth=None):
view = BriefcaseApi.as_view({"post": "create"})
count = XForm.objects.count()
with codecs.open(self.form_def_path, encoding="utf-8") as f:
params = {"form_def_file": f, "dataFile": ""}
auth = auth or DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(XForm.objects.count(), count + 1)
self.assertContains(response, "successfully published.", status_code=201)
self.xform = XForm.objects.order_by("pk").reverse()[0]
def _publish_xml_form(self, auth=None):
view = BriefcaseApi.as_view({'post': 'create'})
count = XForm.objects.count()
with codecs.open(self.form_def_path, encoding='utf-8') as f:
params = {'form_def_file': f, 'dataFile': ''}
auth = auth or DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(XForm.objects.count(), count + 1)
self.assertContains(
response, "successfully published.", status_code=201)
self.xform = XForm.objects.order_by('pk').reverse()[0]
def test_view_submission_list_OtherUser(self):
view = BriefcaseApi.as_view({'get': 'list'})
self._publish_xml_form()
self._make_submissions()
# alice cannot view bob's submissionList
alice_data = {'username': '******', 'email': '*****@*****.**'}
self._create_user_profile(alice_data)
auth = DigestAuth('alice', 'bobbob')
request = self.factory.get(
self._submission_list_url,
data={'formId': self.xform.id_string})
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 404)
def test_publish_xml_form_where_filename_is_not_id_string(self):
view = BriefcaseApi.as_view({'post': 'create'})
form_def_path = os.path.join(
self.main_directory, 'fixtures', 'transportation',
'Transportation Form.xml')
count = XForm.objects.count()
with codecs.open(form_def_path, encoding='utf-8') as f:
params = {'form_def_file': f, 'dataFile': ''}
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(XForm.objects.count(), count + 1)
self.assertContains(
response, "successfully published.", status_code=201)
def test_publish_xml_form_OtherUser(self):
view = BriefcaseApi.as_view({'post': 'create'})
# deno cannot publish form to bob's account
alice_data = {'username': '******', 'email': '*****@*****.**'}
self._create_user_profile(alice_data)
count = XForm.objects.count()
with codecs.open(self.form_def_path, encoding='utf-8') as f:
params = {'form_def_file': f, 'dataFile': ''}
auth = DigestAuth('alice', 'bobbob')
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertNotEqual(XForm.objects.count(), count + 1)
self.assertEqual(response.status_code, 403)
def test_form_upload(self):
view = BriefcaseApi.as_view({'post': 'create'})
self._publish_xml_form()
with codecs.open(self.form_def_path, encoding='utf-8') as f:
params = {'form_def_file': f, 'dataFile': ''}
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 400)
self.assertEqual(response.data, {
'message':
u'Form with this id or SMS-keyword already exists.'
})
def test_publish_xml_form_OtherUser(self):
view = BriefcaseApi.as_view({"post": "create"})
# deno cannot publish form to bob's account
alice_data = {"username": "******", "email": "*****@*****.**"}
self._create_user_profile(alice_data)
count = XForm.objects.count()
with codecs.open(self.form_def_path, encoding="utf-8") as f:
params = {"form_def_file": f, "dataFile": ""}
auth = DigestAuth("alice", "bobbob")
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertNotEqual(XForm.objects.count(), count + 1)
self.assertEqual(response.status_code, 403)
def test_view_downloadSubmission_OtherUser(self):
view = BriefcaseApi.as_view({"get": "retrieve"})
self._publish_xml_form()
self.maxDiff = None
self._submit_transport_instance_w_attachment()
instanceId = u"5b2cc313-fc09-437e-8149-fcd32f695d41"
formId = u"%(formId)s[@version=null and @uiVersion=null]/" u"%(formId)s[@key=uuid:%(instanceId)s]" % {
"formId": self.xform.id_string,
"instanceId": instanceId,
}
params = {"formId": formId}
# alice cannot view bob's downloadSubmission
alice_data = {"username": "******", "email": "*****@*****.**"}
self._create_user_profile(alice_data)
auth = DigestAuth("alice", "bobbob")
request = self.factory.get(self._download_submission_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 404)
def _publish_xml_form(self, auth=None):
view = BriefcaseApi.as_view({'post': 'create'})
count = XForm.objects.count()
with codecs.open(self.form_def_path, encoding='utf-8') as f:
params = {'form_def_file': f, 'dataFile': ''}
auth = auth or DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
# Rewind the file to avoid the xml parser to get an empty string
# and throw and parsing error
f.seek(0)
# Create a new requests to avoid request.FILES to be empty
request = self.factory.post(self._form_upload_url, data=params)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(XForm.objects.count(), count + 1)
self.assertContains(
response, "successfully published.", status_code=201)
self.xform = XForm.objects.order_by('pk').reverse()[0]
def test_view_submission_list(self):
view = BriefcaseApi.as_view({"get": "list"})
self._publish_xml_form()
self._make_submissions()
request = self.factory.get(self._submission_list_url, data={"formId": self.xform.id_string})
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
auth = DigestAuth(self.login_username, self.login_password)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 200)
submission_list_path = os.path.join(
self.main_directory, "fixtures", "transportation", "view", "submissionList.xml"
)
instances = ordered_instances(self.xform)
self.assertEqual(instances.count(), NUM_INSTANCES)
last_index = instances[instances.count() - 1].pk
with codecs.open(submission_list_path, "rb", encoding="utf-8") as f:
expected_submission_list = f.read()
expected_submission_list = expected_submission_list.replace("{{resumptionCursor}}", "%s" % last_index)
self.assertContains(response, expected_submission_list)
def test_publish_xml_form_where_filename_is_not_id_string(self):
view = BriefcaseApi.as_view({'post': 'create'})
form_def_path = os.path.join(
self.main_directory, 'fixtures', 'transportation',
'Transportation Form.xml')
count = XForm.objects.count()
with codecs.open(form_def_path, encoding='utf-8') as f:
params = {'form_def_file': f, 'dataFile': ''}
auth = DigestAuth(self.login_username, self.login_password)
request = self.factory.post(self._form_upload_url, data=params)
response = view(request, username=self.user.username)
self.assertEqual(response.status_code, 401)
# Rewind the file to avoid the xml parser to get an empty string
# and throw and parsing error
f.seek(0)
# Create a new requests to avoid request.FILES to be empty
request = self.factory.post(self._form_upload_url, data=params)
request.META.update(auth(request.META, response))
response = view(request, username=self.user.username)
self.assertEqual(XForm.objects.count(), count + 1)
self.assertContains(
response, "successfully published.", status_code=201)