def testPermissions(self):
     for content in self.demo_instances:
         self.assertTrue(checkPerm(permissions.View, content))
         self.assertTrue(
             checkPerm(permissions.AccessContentsInformation, content))
         self.assertTrue(
             checkPerm(permissions.ModifyPortalContent, content))
    def test_view_comments(self):
        """Make sure published comments can be viewed by everyone.
        """
        # Owner is allowed
        # self.login(default_user)
        # self.assertTrue(checkPerm(View, self.doc))
        # Member is allowed
        login(self.portal, TEST_USER_NAME)
        workflow = self.portal.portal_workflow
        workflow.doActionFor(self.doc, 'publish')

        login(self.portal, 'member')
        self.assertTrue(checkPerm(View, self.comment))
        # Reviewer is allowed
        login(self.portal, 'reviewer')
        self.assertTrue(checkPerm(View, self.comment))
        # Anonymous is allowed
        logout()
        self.assertTrue(checkPerm(View, self.comment))
        # Editor is allowed
        login(self.portal, 'editor')
        self.assertTrue(checkPerm(View, self.comment))
        # Reader is allowed
        login(self.portal, 'reader')
        self.assertTrue(checkPerm(View, self.comment))
示例#3
0
 def testPermissions(self):
     for content in self.demo_instances:
         # XXX: Strangely enough we have correct permissions here, but not so
         #      in initializeArchetype
         self.failUnless(checkPerm(permissions.View, content))
         self.failUnless(checkPerm(permissions.AccessContentsInformation, content))
         self.failUnless(checkPerm(permissions.ModifyPortalContent, content))
示例#4
0
    def test_view_comments(self):
        """Make sure published comments can be viewed by everyone.
        """
        # Owner is allowed
        # self.login(default_user)
        # self.assertTrue(checkPerm(View, self.doc))
        # Member is allowed
        login(self.portal, TEST_USER_NAME)
        workflow = self.portal.portal_workflow
        workflow.doActionFor(self.doc, 'publish')

        login(self.portal, 'member')
        self.assertTrue(checkPerm(View, self.comment))
        # Reviewer is allowed
        login(self.portal, 'reviewer')
        self.assertTrue(checkPerm(View, self.comment))
        # Anonymous is allowed
        logout()
        self.assertTrue(checkPerm(View, self.comment))
        # Editor is allowed
        login(self.portal, 'editor')
        self.assertTrue(checkPerm(View, self.comment))
        # Reader is allowed
        login(self.portal, 'reader')
        self.assertTrue(checkPerm(View, self.comment))
示例#5
0
 def testPermissions(self):
     for content in self.demo_instances:
         self.assertTrue(checkPerm(permissions.View, content))
         self.assertTrue(
             checkPerm(permissions.AccessContentsInformation, content))
         self.assertTrue(checkPerm(permissions.ModifyPortalContent,
                                   content))
    def testAutoPublishMemberposting(self):

        self.login('member')
        self.failUnless(checkPerm(permissions.ApproveComment, self.forum))
        self.failUnless(checkPerm(permissions.ApproveComment, self.conv))
        self.failUnless(checkPerm(permissions.ApproveComment, self.comment))

        self.assertEqual(self.workflow.getInfoFor(self.forum, 'review_state'), 'memberposting')
        self.assertEqual(self.workflow.getInfoFor(self.conv, 'review_state'), 'active')
        self.assertEqual(self.workflow.getInfoFor(self.comment, 'review_state'), 'published')
    def test_publish_comment_on_private_content_does_not_make_comment_visible_to_world(self):
        logout()
        self.assertFalse(checkPerm(View, self.comment))

        # publish comment and check again
        login(self.portal, TEST_USER_NAME)
        workflow = self.portal.portal_workflow
        workflow.doActionFor(self.comment, 'publish')

        logout()
        self.assertFalse(checkPerm(View, self.comment))
示例#8
0
    def test_publish_comment_on_private_content_not_visible_to_world(self):
        logout()
        self.assertFalse(checkPerm(View, self.comment))

        # publish comment and check again
        login(self.portal, TEST_USER_NAME)
        workflow = self.portal.portal_workflow
        workflow.doActionFor(self.comment, 'publish')

        logout()
        self.assertFalse(checkPerm(View, self.comment))
示例#9
0
    def testCommentEditing(self):
        self.login('manager')

        conv = self.forum.addConversation('conv2', 'conv2 body')

        self.failUnless(checkPerm(permissions.EditComment, self.comment))

        self.logout()

        self.login('member2')
        self.failIf(checkPerm(permissions.EditComment, self.comment))
    def testCommentEditing(self):
        self.login('manager')

        conv = self.forum.addConversation('conv2', 'conv2 body')
        
        self.failUnless(checkPerm(permissions.EditComment, self.comment))
        
        self.logout()

        self.login('member2')
        self.failIf(checkPerm(permissions.EditComment, self.comment))
示例#11
0
 def testViewVisibleFolder(self):
     # Owner is allowed
     self.assertTrue(checkPerm(View, self.dir))
     # Member is allowed
     self.login('member')
     self.assertTrue(checkPerm(View, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(View, self.dir))
     # Anonymous is allowed
     self.logout()
     self.assertTrue(checkPerm(View, self.dir))
示例#12
0
 def testListVisibleFolderContents(self):
     # Owner is allowed
     self.failUnless(checkPerm(ListFolderContents, self.dir))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ListFolderContents, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(ListFolderContents, self.dir))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ListFolderContents, self.dir))
示例#13
0
 def testModifyVisibleEvent(self):
     # Owner is allowed
     self.failUnless(checkPerm(ChangeEvents, self.ev))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Reviewer is denied
     self.login('reviewer')
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ChangeEvents, self.ev))
示例#14
0
 def testModifyVisibleEvent(self):
     # Owner is allowed
     self.assertTrue(checkPerm(ChangeEvents, self.ni))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Reviewer is denied
     self.login('reviewer')
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
示例#15
0
 def testViewVisibleDocument(self):
     # Owner is allowed
     self.failUnless(checkPerm(View, self.doc))
     # Member is allowed
     self.login("member")
     self.failUnless(checkPerm(View, self.doc))
     # Reviewer is allowed
     self.login("reviewer")
     self.failUnless(checkPerm(View, self.doc))
     # Anonymous is allowed
     self.logout()
     self.failUnless(checkPerm(View, self.doc))
 def test_modify_permission_new_state(self):
     perm = 'Modify portal content'
     self.user('Manager')
     self.assertTrue(checkPerm(perm, self.reg))
     self.user('Editor')
     self.assertTrue(checkPerm(perm, self.reg))
     self.user('Member')
     self.assertFalse(checkPerm(perm, self.reg))
     self.user('Owner')
     self.assertTrue(checkPerm(perm, self.reg))
     logout()
     self.assertFalse(checkPerm(perm, self.reg))
 def test_view_permission_new_state(self):
     perm = 'View'
     self.user('Manager')
     self.assertTrue(checkPerm(perm, self.reg))
     self.user('Editor')
     self.assertTrue(checkPerm(perm, self.reg))
     self.user('Member')
     self.assertFalse(checkPerm(perm, self.reg))
     self.user('Owner')
     self.assertTrue(checkPerm(perm, self.reg))
     logout()
     self.assertFalse(checkPerm(perm, self.reg))
示例#18
0
 def testAccessVisibleDocument(self):
     # Owner is allowed
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Member is allowed
     self.login("member")
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is allowed
     self.login("reviewer")
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is allowed
     self.logout()
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
示例#19
0
 def testModifyVisibleDocument(self):
     # Owner is allowed
     self.failUnless(checkPerm(ModifyPortalContent, self.doc))
     # Member is denied
     self.login("member")
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Reviewer is denied
     self.login("reviewer")
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
示例#20
0
 def testViewVisibleFolder(self):
     # Owner is allowed
     self.failUnless(checkPerm(View, self.dir))
     # Member is allowed
     self.login('member')
     self.failUnless(checkPerm(View, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(View, self.dir))
     # Anonymous is allowed
     self.logout()
     self.failUnless(checkPerm(View, self.dir))
 def testModifyVisibleEvent(self):
     # Owner is allowed
     self.assertTrue(checkPerm(ChangeEvents, self.ni))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Reviewer is denied
     self.login('reviewer')
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
示例#22
0
 def testModifyVisibleEvent(self):
     # Owner is allowed
     self.failUnless(checkPerm(ChangeEvents, self.ev))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Reviewer is denied
     self.login('reviewer')
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ChangeEvents, self.ev))
 def testViewVisibleFolder(self):
     # Owner is allowed
     self.assertTrue(checkPerm(View, self.dir))
     # Member is allowed
     login(self.portal, 'member')
     self.assertTrue(checkPerm(View, self.dir))
     # Reviewer is allowed
     login(self.portal, 'reviewer')
     self.assertTrue(checkPerm(View, self.dir))
     # Anonymous is allowed
     logout()
     self.assertTrue(checkPerm(View, self.dir))
 def testAccessVisibleFolderContents(self):
     # Owner is allowed
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Member is allowed
     login(self.portal, 'member')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Reviewer is allowed
     login(self.portal, 'reviewer')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Anonymous is allowed
     logout()
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
 def testAccessVisibleDocument(self):
     # Owner is allowed
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
     # Member is allowed
     self.login('member')
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is allowed
     self.logout()
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
 def testViewVisibleDocument(self):
     # Owner is allowed
     self.assertTrue(checkPerm(View, self.doc))
     # Member is allowed
     self.login('member')
     self.assertTrue(checkPerm(View, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(View, self.doc))
     # Anonymous is allowed
     self.logout()
     self.assertTrue(checkPerm(View, self.doc))
示例#27
0
 def testAccessVisibleFolderContents(self):
     # Owner is allowed
     self.failUnless(checkPerm(AccessContentsInformation, self.dir))
     # Member is allowed
     self.login('member')
     self.failUnless(checkPerm(AccessContentsInformation, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(AccessContentsInformation, self.dir))
     # Anonymous is allowed
     self.logout()
     self.failUnless(checkPerm(AccessContentsInformation, self.dir))
 def testListVisibleFolderContents(self):
     # Owner is allowed
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Member is denied
     login(self.portal, 'member')
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
     # Reviewer is allowed
     login(self.portal, 'reviewer')
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Anonymous is denied
     logout()
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
示例#29
0
 def testModifyVisibleDocument(self):
     # Owner is allowed
     self.failUnless(checkPerm(ModifyPortalContent, self.doc))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Reviewer is denied
     self.login('reviewer')
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
示例#30
0
 def testListVisibleFolderContents(self):
     # Owner is allowed
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
示例#31
0
 def testAccessVisibleDocument(self):
     # Owner is allowed
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Member is allowed
     self.login('member')
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is allowed
     self.logout()
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
示例#32
0
 def testAccessVisibleFolderContents(self):
     # Owner is allowed
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Member is allowed
     self.login('member')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Anonymous is allowed
     self.logout()
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
示例#33
0
 def testViewVisibleDocument(self):
     # Owner is allowed
     self.failUnless(checkPerm(View, self.doc))
     # Member is allowed
     self.login('member')
     self.failUnless(checkPerm(View, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(View, self.doc))
     # Anonymous is allowed
     self.logout()
     self.failUnless(checkPerm(View, self.doc))
 def testModifyVisibleDocument(self):
     # Owner is allowed
     self.assertTrue(checkPerm(ModifyPortalContent, self.doc))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
     # Reviewer is denied
     self.login('reviewer')
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
示例#35
0
 def testAccessPrivateDocument(self):
     self.workflow.doActionFor(self.doc, 'hide')
     # Owner is allowed
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is denied
     self.login('reviewer')
     self.failIf(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(AccessContentsInformation, self.doc))
示例#36
0
 def testModifyPrivateDocument(self):
     self.workflow.doActionFor(self.doc, 'hide')
     # Owner is allowed
     self.assertTrue(checkPerm(ModifyPortalContent, self.doc))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
     # Reviewer is denied
     self.login('reviewer')
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
示例#37
0
 def testViewPendingDocument(self):
     self.workflow.doActionFor(self.doc, 'submit')
     # Owner is allowed
     self.assertTrue(checkPerm(View, self.doc))
     # Member is allowed (TODO:?)
     self.login('member')
     self.assertTrue(checkPerm(View, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(View, self.doc))
     # Anonymous is allowed (TODO:?)
     self.logout()
     self.assertTrue(checkPerm(View, self.doc))
示例#38
0
 def testListPrivateFolderContents(self):
     self.workflow.doActionFor(self.dir, 'hide')
     # Owner is allowed
     self.failUnless(checkPerm(ListFolderContents, self.dir))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ListFolderContents, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(ListFolderContents, self.dir))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ListFolderContents, self.dir))
示例#39
0
 def testModifyPendingEvent(self):
     self.workflow.doActionFor(self.ni, 'submit')
     # Owner is denied
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(ChangeEvents, self.ni))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
示例#40
0
 def testViewPrivateFolder(self):
     self.workflow.doActionFor(self.dir, 'hide')
     # Owner is allowed
     self.assertTrue(checkPerm(View, self.dir))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(View, self.dir))
     # Reviewer is denied
     self.login('reviewer')
     self.assertFalse(checkPerm(View, self.dir))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(View, self.dir))
示例#41
0
 def testAccessPendingDocument(self):
     self.workflow.doActionFor(self.doc, 'submit')
     # Owner is allowed
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Member is allowed (TODO:?)
     self.login('member')
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is allowed (TODO:?)
     self.logout()
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
 def testModifyPendingDocument(self):
     self.workflow.doActionFor(self.doc, 'submit')
     # Owner is denied
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(ModifyPortalContent, self.doc))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ModifyPortalContent, self.doc))
 def testAccessPendingDocument(self):
     self.workflow.doActionFor(self.doc, 'submit')
     # Owner is allowed
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
     # Member is allowed (TODO:?)
     self.login('member')
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is allowed (TODO:?)
     self.logout()
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
示例#44
0
 def testModifyPendingEvent(self):
     self.workflow.doActionFor(self.ev, 'submit')
     # Owner is denied
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(ChangeEvents, self.ev))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ChangeEvents, self.ev))
示例#45
0
 def testListPublishedFolderContents(self):
     self.workflow.doActionFor(self.dir, 'publish')
     # Owner is allowed
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
示例#46
0
 def testModifyPendingDocument(self):
     self.workflow.doActionFor(self.doc, 'submit')
     # Owner is denied
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(ModifyPortalContent, self.doc))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
示例#47
0
 def testAccessPublishedFolderContents(self):
     self.workflow.doActionFor(self.dir, 'publish')
     # Owner is allowed
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Member is allowed
     self.login('member')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Anonymous is allowed
     self.logout()
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
 def testModifyPendingEvent(self):
     self.workflow.doActionFor(self.ni, 'submit')
     # Owner is denied
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(ChangeEvents, self.ni))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(ChangeEvents, self.ni))
示例#49
0
 def testModifyPublishedFolderContents(self):
     self.workflow.doActionFor(self.dir, 'publish')
     # Owner is allowed
     self.failUnless(checkPerm(ModifyPortalContent, self.dir))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ModifyPortalContent, self.dir))
     # Reviewer is denied
     self.login('reviewer')
     self.failIf(checkPerm(ModifyPortalContent, self.dir))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ModifyPortalContent, self.dir))
 def testAccessPrivateDocument(self):
     self.workflow.doActionFor(self.doc, 'hide')
     # Owner is allowed
     self.assertTrue(checkPerm(AccessContentsInformation, self.doc))
     # Member is denied
     self.login('member')
     self.assertFalse(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is denied
     self.login('reviewer')
     self.assertFalse(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is denied
     self.logout()
     self.assertFalse(checkPerm(AccessContentsInformation, self.doc))
 def testListPublishedFolderContents(self):
     self.workflow.doActionFor(self.dir, 'publish')
     # Owner is allowed
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Member is denied
     login(self.portal, 'member')
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
     # Reviewer is allowed
     login(self.portal, 'reviewer')
     self.assertTrue(checkPerm(ListFolderContents, self.dir))
     # Anonymous is denied
     logout()
     self.assertFalse(checkPerm(ListFolderContents, self.dir))
示例#52
0
 def testViewPublishedFolder(self):
     self.workflow.doActionFor(self.dir, 'publish')
     # Owner is allowed
     self.assertTrue(checkPerm(View, self.dir))
     # Member is allowed
     self.login('member')
     self.assertTrue(checkPerm(View, self.dir))
     # Reviewer is allowed
     self.login('reviewer')
     self.assertTrue(checkPerm(View, self.dir))
     # Anonymous is allowed
     self.logout()
     self.assertTrue(checkPerm(View, self.dir))
 def testModifyPrivateFolderContents(self):
     self.workflow.doActionFor(self.dir, 'hide')
     # Owner is allowed
     self.assertTrue(checkPerm(ModifyPortalContent, self.dir))
     # Member is denied
     login(self.portal, 'member')
     self.assertFalse(checkPerm(ModifyPortalContent, self.dir))
     # Reviewer is denied
     login(self.portal, 'reviewer')
     self.assertFalse(checkPerm(ModifyPortalContent, self.dir))
     # Anonymous is denied
     logout()
     self.assertFalse(checkPerm(ModifyPortalContent, self.dir))
 def testAccessPublishedFolderContents(self):
     self.workflow.doActionFor(self.dir, 'publish')
     # Owner is allowed
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Member is allowed
     login(self.portal, 'member')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Reviewer is allowed
     login(self.portal, 'reviewer')
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
     # Anonymous is allowed
     logout()
     self.assertTrue(checkPerm(AccessContentsInformation, self.dir))
 def testViewPublishedFolder(self):
     self.workflow.doActionFor(self.dir, 'publish')
     # Owner is allowed
     self.assertTrue(checkPerm(View, self.dir))
     # Member is allowed
     login(self.portal, 'member')
     self.assertTrue(checkPerm(View, self.dir))
     # Reviewer is allowed
     login(self.portal, 'reviewer')
     self.assertTrue(checkPerm(View, self.dir))
     # Anonymous is allowed
     logout()
     self.assertTrue(checkPerm(View, self.dir))
示例#56
0
    def testAutoPublishMemberposting(self):

        self.login('member')
        self.failUnless(checkPerm(permissions.ApproveComment, self.forum))
        self.failUnless(checkPerm(permissions.ApproveComment, self.conv))
        self.failUnless(checkPerm(permissions.ApproveComment, self.comment))

        self.assertEqual(self.workflow.getInfoFor(self.forum, 'review_state'),
                         'memberposting')
        self.assertEqual(self.workflow.getInfoFor(self.conv, 'review_state'),
                         'active')
        self.assertEqual(
            self.workflow.getInfoFor(self.comment, 'review_state'),
            'published')
示例#57
0
 def testAccessPublishedDocument(self):
     self.login('reviewer')
     self.workflow.doActionFor(self.doc, 'publish')
     # Owner is allowed
     self.login(default_user)
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Member is allowed
     self.login('member')
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Reviewer is allowed
     self.login('reviewer')
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
     # Anonymous is allowed
     self.logout()
     self.failUnless(checkPerm(AccessContentsInformation, self.doc))
示例#58
0
 def testModifyPublishedDocument(self):
     self.login('reviewer')
     self.workflow.doActionFor(self.doc, 'publish')
     # Owner is denied
     self.login(default_user)
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Reviewer is denied
     self.login('reviewer')
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ModifyPortalContent, self.doc))
示例#59
0
 def testModifyPublishedEvent(self):
     self.login('reviewer')
     self.workflow.doActionFor(self.ev, 'publish')
     # Owner is denied
     self.login(default_user)
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Member is denied
     self.login('member')
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Reviewer is denied
     self.login('reviewer')
     self.failIf(checkPerm(ChangeEvents, self.ev))
     # Anonymous is denied
     self.logout()
     self.failIf(checkPerm(ChangeEvents, self.ev))