예제 #1
0
def test_edit_some_user_permissions(
    logged_in_client,
    mocker,
    active_user_with_permissions,
    sample_invite,
    mock_get_invites_for_service,
    mock_set_user_permissions,
):
    service = create_sample_service(active_user_with_permissions)
    data = [InvitedUser(**sample_invite)]

    service_id = service['id']

    mocker.patch('app.invite_api_client.get_invites_for_service',
                 return_value=data)
    response = logged_in_client.post(
        url_for('main.edit_user_permissions',
                service_id=service_id,
                user_id=active_user_with_permissions.id),
        data={
            'email_address': active_user_with_permissions.email_address,
            'send_messages': 'y',
            'manage_service': '',
            'manage_api_keys': ''
        })

    assert response.status_code == 302
    assert response.location == url_for('main.manage_users',
                                        service_id=service_id,
                                        _external=True)
    mock_set_user_permissions.assert_called_with(
        str(active_user_with_permissions.id),
        service_id,
        permissions={'send_messages', 'view_activity'})
예제 #2
0
def test_edit_user_permissions(
    logged_in_client,
    active_user_with_permissions,
    mocker,
    mock_get_invites_for_service,
    mock_set_user_permissions,
):
    service = create_sample_service(active_user_with_permissions)
    response = logged_in_client.post(
        url_for('main.edit_user_permissions',
                service_id=service['id'],
                user_id=active_user_with_permissions.id),
        data={
            'email_address': active_user_with_permissions.email_address,
            'send_messages': 'y',
            'manage_templates': 'y',
            'manage_service': 'y',
            'manage_api_keys': 'y'
        })

    assert response.status_code == 302
    assert response.location == url_for('main.manage_users',
                                        service_id=service['id'],
                                        _external=True)
    mock_set_user_permissions.assert_called_with(
        str(active_user_with_permissions.id),
        service['id'],
        permissions={
            'send_messages', 'manage_service', 'manage_templates',
            'manage_api_keys', 'view_activity'
        })
def test_manage_users_does_not_show_accepted_invite(
    logged_in_client,
    mocker,
    active_user_with_permissions,
    sample_invite,
):
    import uuid
    invited_user_id = uuid.uuid4()
    sample_invite['id'] = invited_user_id
    sample_invite['status'] = 'accepted'
    data = [InvitedUser(**sample_invite)]
    service = create_sample_service(active_user_with_permissions)
    mocker.patch('app.user_api_client.get_users_for_service',
                 return_value=[active_user_with_permissions])
    mocker.patch('app.invite_api_client.get_invites_for_service',
                 return_value=data)

    response = logged_in_client.get(
        url_for('main.manage_users', service_id=service['id']))

    assert response.status_code == 200
    page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
    assert page.h1.string.strip() == 'Team members'
    user_lists = page.find_all('div', {'class': 'user-list'})
    assert len(user_lists) == 1
    assert not page.find(text='*****@*****.**')
예제 #4
0
def test_should_redirect_when_saving_a_template(
    logged_in_client,
    active_user_with_permissions,
    mocker,
    mock_get_service_template,
    mock_update_service_template,
    fake_uuid,
):
    service = create_sample_service(active_user_with_permissions)
    mocker.patch('app.user_api_client.get_users_for_service',
                 return_value=[active_user_with_permissions])
    template_id = fake_uuid
    name = "new name"
    content = "template <em>content</em> with & entity"
    data = {
        'id': template_id,
        'name': name,
        'template_content': content,
        'template_type': 'sms',
        'service': service['id'],
        'process_type': 'normal'
    }
    response = logged_in_client.post(url_for('.edit_service_template',
                                             service_id=service['id'],
                                             template_id=template_id),
                                     data=data)

    assert response.status_code == 302
    assert response.location == url_for('.view_template',
                                        service_id=service['id'],
                                        template_id=template_id,
                                        _external=True)
    mock_update_service_template.assert_called_with(template_id, name, 'sms',
                                                    content, service['id'],
                                                    None, 'normal')
예제 #5
0
def test_should_edit_content_when_process_type_is_priority_not_platform_admin(
    logged_in_client,
    active_user_with_permissions,
    mocker,
    mock_get_service_template_with_priority,
    mock_update_service_template,
    fake_uuid,
):
    service = create_sample_service(active_user_with_permissions)
    mocker.patch('app.user_api_client.get_users_for_service',
                 return_value=[active_user_with_permissions])
    template_id = fake_uuid
    data = {
        'id': template_id,
        'name': "new name",
        'template_content': "new template <em>content</em> with & entity",
        'template_type': 'sms',
        'service': service['id'],
        'process_type': 'priority'
    }
    response = logged_in_client.post(url_for('.edit_service_template',
                                             service_id=service['id'],
                                             template_id=template_id),
                                     data=data)
    assert response.status_code == 302
    assert response.location == url_for('.view_template',
                                        service_id=service['id'],
                                        template_id=template_id,
                                        _external=True)
    mock_update_service_template.assert_called_with(
        template_id, "new name", 'sms',
        "new template <em>content</em> with & entity", service['id'], None,
        'priority')
def test_user_cant_invite_themselves(
        app_,
        mocker,
        active_user_with_permissions,
        mock_create_invite
):
    service = create_sample_service(active_user_with_permissions)
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            response = client.post(
                url_for('main.invite_user', service_id=service['id']),
                data={'email_address': active_user_with_permissions.email_address,
                      'send_messages': 'y',
                      'manage_service': 'y',
                      'manage_api_keys': 'y'},
                follow_redirects=True
            )

        assert response.status_code == 200
        page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
        assert page.h1.string.strip() == 'Invite a team member'
        form_error = page.find('span', class_='error-message').string.strip()
        assert form_error == "You can’t send an invitation to yourself"
        assert not mock_create_invite.called
예제 #7
0
def test_should_403_when_create_template_with_process_type_of_priority_for_non_platform_admin(
    client,
    active_user_with_permissions,
    mocker,
    mock_get_service_template,
    mock_update_service_template,
    fake_uuid,
):
    service = create_sample_service(active_user_with_permissions)
    client.login(active_user_with_permissions, mocker, service)
    mocker.patch('app.user_api_client.get_users_for_service',
                 return_value=[active_user_with_permissions])
    template_id = fake_uuid
    data = {
        'id': template_id,
        'name': "new name",
        'template_content': "template <em>content</em> with & entity",
        'template_type': 'sms',
        'service': service['id'],
        'process_type': 'priority'
    }
    response = client.post(url_for('.add_service_template',
                                   service_id=service['id'],
                                   template_type='sms'),
                           data=data)
    assert response.status_code == 403
    mock_update_service_template.called == 0
def test_should_show_page_for_inviting_user(
    logged_in_client,
    active_user_with_permissions,
    mocker,
):
    service = create_sample_service(active_user_with_permissions)
    response = logged_in_client.get(url_for('main.invite_user', service_id=service['id']))

    assert 'Invite a team member' in response.get_data(as_text=True)
    assert response.status_code == 200
def test_should_show_page_for_one_user(
        app_,
        active_user_with_permissions,
        mocker
):
    service = create_sample_service(active_user_with_permissions)
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            response = client.get(url_for('main.edit_user_permissions', service_id=service['id'], user_id=0))

        assert response.status_code == 200
def test_should_show_page_for_inviting_user(
        app_,
        active_user_with_permissions,
        mocker
):
    service = create_sample_service(active_user_with_permissions)
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            response = client.get(url_for('main.invite_user', service_id=service['id']))

        assert 'Invite a team member' in response.get_data(as_text=True)
        assert response.status_code == 200
def test_cancel_invited_user_cancels_user_invitations(
    logged_in_client,
    active_user_with_permissions,
    mocker,
):
    mocker.patch('app.invite_api_client.cancel_invited_user')
    import uuid
    invited_user_id = uuid.uuid4()
    service = create_sample_service(active_user_with_permissions)
    response = logged_in_client.get(url_for('main.cancel_invited_user', service_id=service['id'],
                                    invited_user_id=invited_user_id))

    assert response.status_code == 302
    assert response.location == url_for('main.manage_users', service_id=service['id'], _external=True)
def test_cancel_invited_user_cancels_user_invitations(app_,
                                                      active_user_with_permissions,
                                                      mocker
                                                      ):
    with app_.test_request_context():
        with app_.test_client() as client:
            mocker.patch('app.invite_api_client.cancel_invited_user')
            import uuid
            invited_user_id = uuid.uuid4()
            service = create_sample_service(active_user_with_permissions)
            client.login(active_user_with_permissions, mocker, service)
            response = client.get(url_for('main.cancel_invited_user', service_id=service['id'],
                                          invited_user_id=invited_user_id))

            assert response.status_code == 302
            assert response.location == url_for('main.manage_users', service_id=service['id'], _external=True)
def test_should_show_overview_page(
        app_,
        active_user_with_permissions,
        mocker,
        mock_get_invites_for_service
):
    service = create_sample_service(active_user_with_permissions)
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            mocker.patch('app.user_api_client.get_users_for_service', return_value=[active_user_with_permissions])
            response = client.get(url_for('main.manage_users', service_id=service['id']))

        assert 'Team members' in response.get_data(as_text=True)
        assert response.status_code == 200
        app.user_api_client.get_users_for_service.assert_called_once_with(service_id=service['id'])
def test_invite_user(
    logged_in_client,
    active_user_with_permissions,
    mocker,
    sample_invite,
    email_address,
    gov_user,
):
    service = create_sample_service(active_user_with_permissions)
    sample_invite['email_address'] = '*****@*****.**'

    data = [InvitedUser(**sample_invite)]
    assert is_gov_user(email_address) == gov_user
    mocker.patch('app.invite_api_client.get_invites_for_service',
                 return_value=data)
    mocker.patch('app.user_api_client.get_users_for_service',
                 return_value=[active_user_with_permissions])
    mocker.patch('app.invite_api_client.create_invite',
                 return_value=InvitedUser(**sample_invite))
    response = logged_in_client.post(url_for('main.invite_user',
                                             service_id=service['id']),
                                     data={
                                         'email_address': email_address,
                                         'view_activity': 'y',
                                         'send_messages': 'y',
                                         'manage_templates': 'y',
                                         'manage_service': 'y',
                                         'manage_api_keys': 'y'
                                     },
                                     follow_redirects=True)

    assert response.status_code == 200
    page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
    assert page.h1.string.strip() == 'Team members'
    flash_banner = page.find('div',
                             class_='banner-default-with-tick').string.strip()
    assert flash_banner == 'Invite sent to [email protected]'

    expected_permissions = {
        'manage_api_keys', 'manage_service', 'manage_templates',
        'send_messages', 'view_activity'
    }

    app.invite_api_client.create_invite.assert_called_once_with(
        sample_invite['from_user'], sample_invite['service'], email_address,
        expected_permissions, 'sms_auth')
def test_manage_users_shows_invited_user(app_,
                                         mocker,
                                         active_user_with_permissions,
                                         sample_invite):
    service = create_sample_service(active_user_with_permissions)
    data = [InvitedUser(**sample_invite)]
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)

            mocker.patch('app.invite_api_client.get_invites_for_service', return_value=data)
            mocker.patch('app.user_api_client.get_users_for_service', return_value=[active_user_with_permissions])

            response = client.get(url_for('main.manage_users', service_id=service['id']))

            assert response.status_code == 200
            page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
            assert page.h1.string.strip() == 'Team members'
            invited_users_list = page.find_all('div', {'class': 'user-list'})[1]
            assert invited_users_list.find_all('h3')[0].text.strip() == '*****@*****.**'
            assert invited_users_list.find_all('a')[0].text.strip() == 'Cancel invitation'
def test_invite_user(
        app_,
        active_user_with_permissions,
        mocker,
        sample_invite,
        email_address,
        gov_user
):
    service = create_sample_service(active_user_with_permissions)
    sample_invite['email_address'] = '*****@*****.**'

    data = [InvitedUser(**sample_invite)]
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            assert is_gov_user(email_address) == gov_user
            mocker.patch('app.invite_api_client.get_invites_for_service', return_value=data)
            mocker.patch('app.user_api_client.get_users_for_service', return_value=[active_user_with_permissions])
            mocker.patch('app.invite_api_client.create_invite', return_value=InvitedUser(**sample_invite))
            response = client.post(
                url_for('main.invite_user', service_id=service['id']),
                data={'email_address': email_address,
                      'send_messages': 'y',
                      'manage_service': 'y',
                      'manage_api_keys': 'y'},
                follow_redirects=True
            )

        assert response.status_code == 200
        page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
        assert page.h1.string.strip() == 'Team members'
        flash_banner = page.find('div', class_='banner-default-with-tick').string.strip()
        assert flash_banner == 'Invite sent to [email protected]'

        expected_permissions = 'manage_api_keys,manage_settings,manage_templates,manage_users,send_emails,send_letters,send_texts,view_activity'  # noqa

        app.invite_api_client.create_invite.assert_called_once_with(sample_invite['from_user'],
                                                                    sample_invite['service'],
                                                                    email_address,
                                                                    expected_permissions)
def test_user_cant_invite_themselves(
    logged_in_client,
    mocker,
    active_user_with_permissions,
    mock_create_invite,
):
    service = create_sample_service(active_user_with_permissions)
    response = logged_in_client.post(
        url_for('main.invite_user', service_id=service['id']),
        data={'email_address': active_user_with_permissions.email_address,
              'send_messages': 'y',
              'manage_service': 'y',
              'manage_api_keys': 'y'},
        follow_redirects=True
    )

    assert response.status_code == 200
    page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
    assert page.h1.string.strip() == 'Invite a team member'
    form_error = page.find('span', class_='error-message').string.strip()
    assert form_error == "You can’t send an invitation to yourself"
    assert not mock_create_invite.called
def test_edit_some_user_permissions(
        app_,
        mocker,
        active_user_with_permissions,
        sample_invite,
        mock_get_invites_for_service,
        mock_set_user_permissions
):
    service = create_sample_service(active_user_with_permissions)
    data = [InvitedUser(**sample_invite)]
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            service_id = service['id']

            mocker.patch('app.invite_api_client.get_invites_for_service', return_value=data)
            response = client.post(url_for(
                'main.edit_user_permissions', service_id=service_id, user_id=active_user_with_permissions.id
            ), data={'email_address': active_user_with_permissions.email_address,
                     'send_messages': 'y',
                     'manage_service': '',
                     'manage_api_keys': ''})

        assert response.status_code == 302
        assert response.location == url_for(
            'main.manage_users', service_id=service_id, _external=True
        )
        mock_set_user_permissions.assert_called_with(
            str(active_user_with_permissions.id),
            service_id,
            permissions={
                'send_texts',
                'send_emails',
                'send_letters',
                'view_activity'
            }
        )
def test_edit_user_permissions(
        app_,
        active_user_with_permissions,
        mocker,
        mock_get_invites_for_service,
        mock_set_user_permissions
):
    service = create_sample_service(active_user_with_permissions)
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            response = client.post(url_for(
                'main.edit_user_permissions', service_id=service['id'], user_id=active_user_with_permissions.id
            ), data={'email_address': active_user_with_permissions.email_address,
                     'send_messages': 'y',
                     'manage_service': 'y',
                     'manage_api_keys': 'y'})

        assert response.status_code == 302
        assert response.location == url_for(
            'main.manage_users', service_id=service['id'], _external=True
        )
        mock_set_user_permissions.assert_called_with(
            str(active_user_with_permissions.id),
            service['id'],
            permissions={
                'send_texts',
                'send_emails',
                'send_letters',
                'manage_users',
                'manage_templates',
                'manage_settings',
                'manage_api_keys',
                'view_activity'
            }
        )
def test_manage_users_does_not_show_accepted_invite(app_,
                                                    mocker,
                                                    active_user_with_permissions,
                                                    sample_invite):
    import uuid
    invited_user_id = uuid.uuid4()
    sample_invite['id'] = invited_user_id
    sample_invite['status'] = 'accepted'
    data = [InvitedUser(**sample_invite)]
    service = create_sample_service(active_user_with_permissions)
    with app_.test_request_context():
        with app_.test_client() as client:
            client.login(active_user_with_permissions, mocker, service)
            mocker.patch('app.user_api_client.get_users_for_service', return_value=[active_user_with_permissions])
            mocker.patch('app.invite_api_client.get_invites_for_service', return_value=data)

            response = client.get(url_for('main.manage_users', service_id=service['id']))

            assert response.status_code == 200
            page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
            assert page.h1.string.strip() == 'Team members'
            user_lists = page.find_all('div', {'class': 'user-list'})
            assert len(user_lists) == 1
            assert not page.find(text='*****@*****.**')