Esempio n. 1
0
    def test_delete_someones_reply_not_owner(self):
        """Delete someone else's comment as NOT the owner of the entry."""
        url = reverse('diary.reply', args=[self.e.id])
        request = self.factory.post(url, {'text': 'ha' * 10})
        request.user = self.u
        response = views.reply(request, diary_id=self.e.id)
        # Is HttpResponseRedirect called (based on a valid form)?
        eq_(response.status_code, 302)
        assert Comment.objects.filter(diary=self.e.id, creator=self.u).exists()

        comm = get_object_or_404(Comment, diary=self.e.id, creator=self.u)
        url = reverse('diary.delete_comment', args=[comm.id])
        request = self.factory.post(url)
        request.user = self.c
        fn = lambda: views.delete_comment(request, comment_id=comm.id)
        self.assertRaises(PermissionDenied, fn)
Esempio n. 2
0
    def test_delete_own_reply_diff_diary(self):
        """Delete own comment as NOT the owner of the entry."""
        url = reverse('diary.reply', args=[self.e.id])
        request = self.factory.post(url, {'text': 'ha' * 10})
        request.user = self.c
        response = views.reply(request, diary_id=self.e.id)
        # Is HttpResponseRedirect called (based on a valid form)?
        eq_(response.status_code, 302)
        assert Comment.objects.filter(diary=self.e.id, creator=self.c).exists()

        comm = get_object_or_404(Comment, diary=self.e.id, creator=self.c)
        url = reverse('diary.delete_comment', args=[comm.id])
        request = self.factory.post(url)
        request.user = self.c
        response = views.delete_comment(request, comment_id=comm.id)
        assert not (Comment.objects.filter(diary=self.e.id, creator=self.c).
                    exists())
Esempio n. 3
0
    def test_reply_diary(self):
        url = reverse('diary.reply', args=[self.e.id])
        request = self.factory.post(url, {'text': 'ha' * 10})
        request.user = self.u
        response = views.reply(request, diary_id=self.e.id)
        # Is HttpResponseRedirect called (based on a valid form)?
        eq_(response.status_code, 302)

        # Was the diary comment created?
        url = reverse('diary.single',
                      kwargs=get_kwargs_for_diary_id(self.e.id))
        request = self.factory.get(url)
        request.user = self.u
        response = views.single(request, username=self.u.username,
                                year=self.e.created_day.year,
                                month=self.e.created_day.month,
                                day=self.e.created_day.day)
        eq_(response.status_code, 200)
        # Yes, indeed.
        contains(response.content, 'ha' * 10)