def setUp(self):
"""
:return:
"""
super(UtilsTestCase, self).setUp()
self.request_factory = RequestFactory()
self.user_model_cls = get_user_model()
def setUp(self):
"""
:return:
"""
super(UtilsTestCase, self).setUp()
self.request_factory = RequestFactory()
self.user_model_cls = get_user_model()
def memberuser(self):
"""
:return:
"""
return get_user_model().objects.get_by_natural_key("*****@*****.**")
def contributoruser(self):
"""
:return:
"""
return get_user_model().objects.get_by_natural_key("*****@*****.**")
def test__add_security_guard(self):
"""
:return:
"""
news_folder = model_fixture.models.get('news_folder_cls').objects.get(pk=1)
date_folder_cls = model_fixture.models.get('date_folder_cls')
hacs_query = date_folder_cls.objects.filter(created_by=model_fixture.superuser, created_on__year=2017).\
exclude(Q(slug='fake-slug') | ~Q(slug='2016-10-10')).filter(Q(recursive=True,
parent_container_id=news_folder.pk) & Q(acquire_parent=True))
hacs_query._add_security_guard(date_folder_cls.__hacs_base_content_type__, model_fixture.contributoruser)
sql_str = str(hacs_query.query)
"""
sql_str =
'SELECT "test_date_folder"."id", "test_date_folder"."uuid", "test_date_folder"."name",
"test_date_folder"."slug", "test_date_folder"."created_on", "test_date_folder"."created_by_id",
"test_date_folder"."modified_by_id", "test_date_folder"."modified_on", "test_date_folder"."state",
"test_date_folder"."permissions_actions_map", "test_date_folder"."roles_actions_map",
"test_date_folder"."local_roles", "test_date_folder"."owner_id", "test_date_folder"."acquired_owners",
"test_date_folder"."acquire_parent", "test_date_folder"."description", "test_date_folder"."workflow_id",
"test_date_folder"."container_content_type_id", "test_date_folder"."parent_container_id",
"test_date_folder"."recursive", "test_date_folder"."extra_info"
FROM "test_date_folder"
WHERE ("test_date_folder"."created_on" BETWEEN 2017-01-01 00:00:00+00:00 AND 2017-12-31 23:59:59.999999+00:00
AND "test_date_folder"."created_by_id" = 5
AND NOT (("test_date_folder"."slug" = fake-slug OR NOT ("test_date_folder"."slug" = 2016-10-10)))
AND "test_date_folder"."parent_container_id" = 1
AND "test_date_folder"."recursive" = True
AND "test_date_folder"."acquire_parent" = True
AND ("test_date_folder"."permissions_actions_map" -> \'object.view\' ?| [u\'hacs.PublicView\',
u\'hacs.AuthenticatedView\', u\'hacs.ViewContent\', u\'hacs.AddContent\', u\'hacs.CanListObjects\',
u\'hacs.CanTraverseContainer\']
OR "test_date_folder"."acquired_owners" @> \'"*****@*****.**"\'
OR "test_date_folder"."roles_actions_map" -> \'object.view\' ?|
(ARRAY(SELECT jsonb_array_elements_text("test_date_folder"."local_roles" -> [email protected])))
OR "test_date_folder"."owner_id" = 3))'
"""
attach_system_user()
user_permissions = model_fixture.contributoruser.get_all_permissions()
release_system_user()
for perm in user_permissions:
if perm not in sql_str:
pass
#raise AssertionError("%s permission should have inside SQL string" % perm)
# ***********************************
# Test Local Roles Works!
# Test Ownership Works!
# Test Required Permission Works!
# Security Should Respect Local roles
# ************************************
# If news item in private state then `hacs.ManageContent` permission is required
news_item_cls = model_fixture.models.get('news_item_cls')
for item in news_item_cls.objects.unrestricted():
item.state = "private"
item.save()
HACS_ACCESS_CONTROL_LOCAL.current_user = model_fixture.editoruser
results = news_item_cls.objects.all()
count = len(results)
# Any Editor has required view permission even in private state
self.assertEqual(2, count)
HACS_ACCESS_CONTROL_LOCAL.current_user = model_fixture.contributoruser
results = news_item_cls.objects.all()
# Although in private state, contributor user has no views access but in case of `[email protected]`
# she is owner of first news item and has local role editor of second news item
# ultimately should have two news items in result
count = len(results)
self.assertEqual(2, count)
HACS_ACCESS_CONTROL_LOCAL.current_user = get_user_model().objects.get_by_natural_key("*****@*****.**")
results = news_item_cls.objects.all()
count = len(results)
# In Private state contributor has no view permissions!
self.assertEqual(0, count)
attach_system_user()
# Restore to original State
for item in news_item_cls.objects.unrestricted():
item.state = "draft"
item.save()
release_system_user()
# Now Second contributor user also should have view permission
results = news_item_cls.objects.all()
count = len(results)
self.assertEqual(2, count)
def __init__(self):
""""""
self.cache = caches[getattr(settings, 'HACS_CACHE_SETTING_NAME',
HACS_CACHE_SETTING_NAME)]
self.group_cls = get_group_model()
self.user_cls = get_user_model()
