class TestPreprintProviders(OsfTestCase):
def setUp(self):
super(TestPreprintProviders, self).setUp()
self.preprint = PreprintFactory(providers=[])
self.provider = PreprintProviderFactory(name='WWEArxiv')
def test_add_provider(self):
assert_not_equal(self.preprint.provider, self.provider)
self.preprint.provider = self.provider
self.preprint.save()
self.preprint.reload()
assert_equal(self.preprint.provider, self.provider)
def test_remove_provider(self):
self.preprint.provider = None
self.preprint.save()
self.preprint.reload()
assert_equal(self.preprint.provider, None)
class TestPreprintUpdate(ApiTestCase):
def setUp(self):
super(TestPreprintUpdate, self).setUp()
self.user = AuthUserFactory()
self.preprint = PreprintFactory(creator=self.user)
self.url = '/{}preprints/{}/'.format(API_BASE, self.preprint._id)
self.subject = SubjectFactory()
def test_update_preprint_title(self):
update_title_payload = build_preprint_update_payload(
self.preprint._id, attributes={'title': 'A new title'})
res = self.app.patch_json_api(self.url,
update_title_payload,
auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.title, 'A new title')
def test_update_preprint_permission_denied(self):
update_title_payload = build_preprint_update_payload(
self.preprint._id, attributes={'title': 'A new title'})
noncontrib = AuthUserFactory()
res = self.app.patch_json_api(self.url,
update_title_payload,
auth=noncontrib.auth,
expect_errors=True)
assert_equal(res.status_code, 403)
res = self.app.patch_json_api(self.url,
update_title_payload,
expect_errors=True)
assert_equal(res.status_code, 401)
def test_update_preprint_tags(self):
update_tags_payload = build_preprint_update_payload(
self.preprint._id, attributes={'tags': ['newtag', 'bluetag']})
res = self.app.patch_json_api(self.url,
update_tags_payload,
auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_in('newtag', self.preprint.tags)
assert_in('bluetag', self.preprint.tags)
assert_in('tag_added', [l.action for l in self.preprint.logs])
def test_update_preprint_tags_not_list(self):
update_tags_payload = build_preprint_update_payload(
self.preprint._id, attributes={'tags': 'newtag'})
res = self.app.patch_json_api(self.url,
update_tags_payload,
auth=self.user.auth,
expect_errors=True)
assert_equal(res.status_code, 400)
def test_update_preprint_none_tags(self):
update_tags_payload = build_preprint_update_payload(
self.preprint._id, attributes={'tags': [None]})
res = self.app.patch_json_api(self.url,
update_tags_payload,
auth=self.user.auth,
expect_errors=True)
assert_equal(res.status_code, 400)
def test_update_preprint_subjects(self):
assert_not_equal(self.preprint.preprint_subjects[0], self.subject._id)
update_subjects_payload = build_preprint_update_payload(
self.preprint._id, attributes={"subjects": [self.subject._id]})
res = self.app.patch_json_api(self.url,
update_subjects_payload,
auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_subjects[0], self.subject)
def test_update_invalid_subjects(self):
preprint_subjects = self.preprint.preprint_subjects
update_subjects_payload = build_preprint_update_payload(
self.preprint._id, attributes={"subjects": ['wwe']})
res = self.app.patch_json_api(self.url,
update_subjects_payload,
auth=self.user.auth,
expect_errors=True)
assert_equal(res.status_code, 400)
self.preprint.reload()
assert_equal(self.preprint.preprint_subjects, preprint_subjects)
def test_update_primary_file(self):
new_file = test_utils.create_test_file(self.preprint,
'openupthatwindow.pdf')
relationships = {
"primary_file": {
"data": {
"type": "file",
"id": new_file._id
}
}
}
assert_not_equal(self.preprint.preprint_file, new_file)
update_file_payload = build_preprint_update_payload(
self.preprint._id, relationships=relationships)
res = self.app.patch_json_api(self.url,
update_file_payload,
auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_file, new_file)
def test_new_primary_not_in_node(self):
project = ProjectFactory()
file_for_project = test_utils.create_test_file(
project, 'letoutthatantidote.pdf')
relationships = {
"primary_file": {
"data": {
"type": "file",
"id": file_for_project._id
}
}
}
update_file_payload = build_preprint_update_payload(
self.preprint._id, relationships=relationships)
res = self.app.patch_json_api(self.url,
update_file_payload,
auth=self.user.auth,
expect_errors=True)
assert_equal(res.status_code, 400)
self.preprint.reload()
assert_not_equal(self.preprint.preprint_file, file_for_project)
def test_update_doi(self):
new_doi = '10.123/456/789'
assert_not_equal(self.preprint.preprint_doi, new_doi)
update_subjects_payload = build_preprint_update_payload(
self.preprint._id, attributes={"doi": new_doi})
res = self.app.patch_json_api(self.url,
update_subjects_payload,
auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_doi, new_doi)
preprint_detail = self.app.get(self.url,
auth=self.user.auth).json['data']
assert_equal(preprint_detail['links']['doi'],
'https://dx.doi.org/{}'.format(new_doi))
def test_write_contrib_cannot_set_preprint_file(self):
user_two = AuthUserFactory()
self.preprint.add_contributor(user_two,
permissions=['read', 'write'],
auth=Auth(self.user),
save=True)
new_file = test_utils.create_test_file(self.preprint,
'openupthatwindow.pdf')
data = {
'data': {
'type': 'primary_file',
'id': self.preprint._id,
'attributes': {},
'relationships': {
'primary_file': {
'data': {
'type': 'file',
'id': new_file._id
}
}
}
}
}
res = self.app.patch_json_api(self.url,
data,
auth=user_two.auth,
expect_errors=True)
assert_equal(res.status_code, 403)
def test_noncontrib_cannot_set_preprint_file(self):
user_two = AuthUserFactory()
new_file = test_utils.create_test_file(self.preprint,
'openupthatwindow.pdf')
data = {
'data': {
'type': 'primary_file',
'id': self.preprint._id,
'attributes': {},
'relationships': {
'primary_file': {
'data': {
'type': 'file',
'id': new_file._id
}
}
}
}
}
res = self.app.patch_json_api(self.url,
data,
auth=user_two.auth,
expect_errors=True)
assert_equal(res.status_code, 403)
def test_write_contrib_cannot_set_subjects(self):
user_two = AuthUserFactory()
self.preprint.add_contributor(user_two,
permissions=['read', 'write'],
auth=Auth(self.user),
save=True)
assert_not_equal(self.preprint.preprint_subjects[0], self.subject._id)
update_subjects_payload = build_preprint_update_payload(
self.preprint._id, attributes={"subjects": [self.subject._id]})
res = self.app.patch_json_api(self.url,
update_subjects_payload,
auth=user_two.auth,
expect_errors=True)
assert_equal(res.status_code, 403)
assert_not_equal(self.preprint.preprint_subjects[0], self.subject._id)
def test_noncontrib_cannot_set_subjects(self):
user_two = AuthUserFactory()
self.preprint.add_contributor(user_two,
permissions=['read', 'write'],
auth=Auth(self.user),
save=True)
assert_not_equal(self.preprint.preprint_subjects[0], self.subject._id)
update_subjects_payload = build_preprint_update_payload(
self.preprint._id, attributes={"subjects": [self.subject._id]})
res = self.app.patch_json_api(self.url,
update_subjects_payload,
auth=user_two.auth,
expect_errors=True)
assert_equal(res.status_code, 403)
assert_not_equal(self.preprint.preprint_subjects[0], self.subject._id)
class TestPreprintServicePermissions(OsfTestCase):
def setUp(self):
super(TestPreprintServicePermissions, self).setUp()
self.user = AuthUserFactory()
self.write_contrib = AuthUserFactory()
self.project = ProjectFactory(creator=self.user)
self.project.add_contributor(self.write_contrib, permissions=[permissions.WRITE])
self.preprint = PreprintFactory(project=self.project, is_published=False)
def test_nonadmin_cannot_set_subjects(self):
initial_subjects = self.preprint.subjects
with assert_raises(PermissionsError):
self.preprint.set_subjects([[SubjectFactory()._id]], auth=Auth(self.write_contrib), save=True)
self.preprint.reload()
assert_equal(initial_subjects, self.preprint.subjects)
def test_nonadmin_cannot_set_file(self):
initial_file = self.preprint.primary_file
file = OsfStorageFile.create(
is_file=True,
node=self.project,
path='/panda.txt',
name='panda.txt',
materialized_path='/panda.txt')
file.save()
with assert_raises(PermissionsError):
self.preprint.set_primary_file(file, auth=Auth(self.write_contrib), save=True)
self.preprint.reload()
self.preprint.node.reload()
assert_equal(initial_file._id, self.preprint.primary_file._id)
def test_nonadmin_cannot_publish(self):
assert_false(self.preprint.is_published)
with assert_raises(PermissionsError):
self.preprint.set_published(True, auth=Auth(self.write_contrib), save=True)
assert_false(self.preprint.is_published)
def test_admin_can_set_subjects(self):
initial_subjects = self.preprint.subjects
self.preprint.set_subjects([[SubjectFactory()._id]], auth=Auth(self.user), save=True)
self.preprint.reload()
assert_not_equal(initial_subjects, self.preprint.subjects)
def test_admin_can_set_file(self):
initial_file = self.preprint.primary_file
file = OsfStorageFile.create(
is_file=True,
node=self.project,
path='/panda.txt',
name='panda.txt',
materialized_path='/panda.txt')
file.save()
self.preprint.set_primary_file(file, auth=Auth(self.user), save=True)
self.preprint.reload()
self.preprint.node.reload()
assert_not_equal(initial_file._id, self.preprint.primary_file._id)
assert_equal(file._id, self.preprint.primary_file._id)
def test_admin_can_publish(self):
assert_false(self.preprint.is_published)
self.preprint.set_published(True, auth=Auth(self.user), save=True)
assert_true(self.preprint.is_published)
def test_admin_cannot_unpublish(self):
assert_false(self.preprint.is_published)
self.preprint.set_published(True, auth=Auth(self.user), save=True)
assert_true(self.preprint.is_published)
with assert_raises(ValueError) as e:
self.preprint.set_published(False, auth=Auth(self.user), save=True)
assert_in('Cannot unpublish', e.exception.message)
class TestPreprintUpdate(ApiTestCase):
def setUp(self):
super(TestPreprintUpdate, self).setUp()
self.user = AuthUserFactory()
self.preprint = PreprintFactory(creator=self.user)
self.url = '/{}preprints/{}/'.format(API_BASE, self.preprint._id)
self.subject = SubjectFactory()
def test_update_preprint_title(self):
update_title_payload = build_preprint_update_payload(self.preprint._id, attributes={'title': 'A new title'})
res = self.app.patch_json_api(self.url, update_title_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.title, 'A new title')
def test_update_preprint_tags(self):
update_tags_payload = build_preprint_update_payload(self.preprint._id, attributes={'tags': ['newtag', 'bluetag']})
res = self.app.patch_json_api(self.url, update_tags_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_in('newtag', self.preprint.tags)
assert_in('bluetag', self.preprint.tags)
assert_in('tag_added', [l.action for l in self.preprint.logs])
def test_update_preprint_tags_not_list(self):
update_tags_payload = build_preprint_update_payload(self.preprint._id, attributes={'tags': 'newtag'})
res = self.app.patch_json_api(self.url, update_tags_payload, auth=self.user.auth, expect_errors=True)
assert_equal(res.status_code, 400)
def test_update_preprint_none_tags(self):
update_tags_payload = build_preprint_update_payload(self.preprint._id, attributes={'tags': [None]})
res = self.app.patch_json_api(self.url, update_tags_payload, auth=self.user.auth, expect_errors=True)
assert_equal(res.status_code, 400)
def test_update_preprint_subjects(self):
assert_not_equal(self.preprint.preprint_subjects[0], self.subject._id)
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"subjects": [self.subject._id]})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_subjects[0], self.subject)
def test_update_invalid_subjects(self):
preprint_subjects = self.preprint.preprint_subjects
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"subjects": ['wwe']})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=self.user.auth, expect_errors=True)
assert_equal(res.status_code, 400)
self.preprint.reload()
assert_equal(self.preprint.preprint_subjects, preprint_subjects)
def test_update_primary_file(self):
new_file = test_utils.create_test_file(self.preprint, 'openupthatwindow.pdf')
relationships = {
"primary_file": {
"data": {
"type": "file",
"id": new_file._id
}
}
}
assert_not_equal(self.preprint.preprint_file, new_file)
update_file_payload = build_preprint_update_payload(self.preprint._id, relationships=relationships)
res = self.app.patch_json_api(self.url, update_file_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_file, new_file)
def test_new_primary_not_in_node(self):
project = ProjectFactory()
file_for_project = test_utils.create_test_file(project, 'letoutthatantidote.pdf')
relationships = {
"primary_file": {
"data": {
"type": "file",
"id": file_for_project._id
}
}
}
update_file_payload = build_preprint_update_payload(self.preprint._id, relationships=relationships)
res = self.app.patch_json_api(self.url, update_file_payload, auth=self.user.auth, expect_errors=True)
assert_equal(res.status_code, 400)
self.preprint.reload()
assert_not_equal(self.preprint.preprint_file, file_for_project)
def test_update_doi(self):
new_doi = '10.123/456/789'
assert_not_equal(self.preprint.preprint_doi, new_doi)
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"doi": new_doi})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_doi, new_doi)
preprint_detail = self.app.get(self.url, auth=self.user.auth).json['data']
assert_equal(preprint_detail['links']['doi'], 'https://dx.doi.org/{}'.format(new_doi))
class TestPreprintUpdate(ApiTestCase):
def setUp(self):
super(TestPreprintUpdate, self).setUp()
self.user = AuthUserFactory()
self.preprint = PreprintFactory(creator=self.user)
self.url = '/{}preprints/{}/'.format(API_BASE, self.preprint._id)
self.subject = SubjectFactory()
def test_update_preprint_permission_denied(self):
update_doi_payload = build_preprint_update_payload(self.preprint._id, attributes={'article_doi': '10.123/456/789'})
noncontrib = AuthUserFactory()
res = self.app.patch_json_api(self.url, update_doi_payload, auth=noncontrib.auth, expect_errors=True)
assert_equal(res.status_code, 403)
res = self.app.patch_json_api(self.url, update_doi_payload, expect_errors=True)
assert_equal(res.status_code, 401)
def test_update_subjects(self):
assert_not_equal(self.preprint.subjects[0], [self.subject._id])
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"subjects": [[self.subject._id]]})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.subjects[0], [self.subject._id])
def test_update_invalid_subjects(self):
subjects = self.preprint.subjects
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"subjects": [['wwe']]})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=self.user.auth, expect_errors=True)
assert_equal(res.status_code, 400)
self.preprint.reload()
assert_equal(self.preprint.subjects, subjects)
def test_update_primary_file(self):
new_file = test_utils.create_test_file(self.preprint.node, 'openupthatwindow.pdf')
relationships = {
"primary_file": {
"data": {
"type": "file",
"id": new_file._id
}
}
}
assert_not_equal(self.preprint.primary_file, new_file)
update_file_payload = build_preprint_update_payload(self.preprint._id, relationships=relationships)
res = self.app.patch_json_api(self.url, update_file_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.node.reload()
assert_equal(self.preprint.primary_file, new_file)
def test_new_primary_not_in_node(self):
project = ProjectFactory()
file_for_project = test_utils.create_test_file(project, 'letoutthatantidote.pdf')
relationships = {
"primary_file": {
"data": {
"type": "file",
"id": file_for_project._id
}
}
}
update_file_payload = build_preprint_update_payload(self.preprint._id, relationships=relationships)
res = self.app.patch_json_api(self.url, update_file_payload, auth=self.user.auth, expect_errors=True)
assert_equal(res.status_code, 400)
self.preprint.reload()
assert_not_equal(self.preprint.primary_file, file_for_project)
def test_update_doi(self):
new_doi = '10.1234/ASDFASDF'
assert_not_equal(self.preprint.article_doi, new_doi)
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"doi": new_doi})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=self.user.auth)
assert_equal(res.status_code, 200)
self.preprint.node.reload()
assert_equal(self.preprint.article_doi, new_doi)
preprint_detail = self.app.get(self.url, auth=self.user.auth).json['data']
assert_equal(preprint_detail['links']['doi'], 'https://dx.doi.org/{}'.format(new_doi))
def test_write_contrib_cannot_set_primary_file(self):
user_two = AuthUserFactory()
self.preprint.node.add_contributor(user_two, permissions=['read', 'write'], auth=Auth(self.user), save=True)
new_file = test_utils.create_test_file(self.preprint.node, 'openupthatwindow.pdf')
data = {
'data':{
'type': 'primary_file',
'id': self.preprint._id,
'attributes': {},
'relationships': {
'primary_file': {
'data': {
'type': 'file',
'id': new_file._id
}
}
}
}
}
res = self.app.patch_json_api(self.url, data, auth=user_two.auth, expect_errors=True)
assert_equal(res.status_code, 403)
def test_noncontrib_cannot_set_primary_file(self):
user_two = AuthUserFactory()
new_file = test_utils.create_test_file(self.preprint.node, 'openupthatwindow.pdf')
data = {
'data':{
'type': 'primary_file',
'id': self.preprint._id,
'attributes': {},
'relationships': {
'primary_file': {
'data': {
'type': 'file',
'id': new_file._id
}
}
}
}
}
res = self.app.patch_json_api(self.url, data, auth=user_two.auth, expect_errors=True)
assert_equal(res.status_code, 403)
def test_write_contrib_cannot_set_subjects(self):
user_two = AuthUserFactory()
self.preprint.node.add_contributor(user_two, permissions=['read', 'write'], auth=Auth(self.user), save=True)
assert_not_equal(self.preprint.subjects[0], self.subject._id)
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"subjects": [[self.subject._id]]})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=user_two.auth, expect_errors=True)
assert_equal(res.status_code, 403)
assert_not_equal(self.preprint.subjects[0], self.subject._id)
def test_noncontrib_cannot_set_subjects(self):
user_two = AuthUserFactory()
self.preprint.node.add_contributor(user_two, permissions=['read', 'write'], auth=Auth(self.user), save=True)
assert_not_equal(self.preprint.subjects[0], self.subject._id)
update_subjects_payload = build_preprint_update_payload(self.preprint._id, attributes={"subjects": [[self.subject._id]]})
res = self.app.patch_json_api(self.url, update_subjects_payload, auth=user_two.auth, expect_errors=True)
assert_equal(res.status_code, 403)
assert_not_equal(self.preprint.subjects[0], self.subject._id)
class TestPreprintUpdateLicense(ApiTestCase):
def setUp(self):
super(TestPreprintUpdateLicense, self).setUp()
ensure_licenses()
self.admin_contributor = AuthUserFactory()
self.rw_contributor = AuthUserFactory()
self.read_contributor = AuthUserFactory()
self.non_contributor = AuthUserFactory()
self.preprint_provider = PreprintProviderFactory()
self.preprint = PreprintFactory(creator=self.admin_contributor, provider=self.preprint_provider)
self.preprint.node.add_contributor(self.rw_contributor, auth=Auth(self.admin_contributor))
self.preprint.node.add_contributor(self.read_contributor, auth=Auth(self.admin_contributor), permissions=['read'])
self.preprint.node.save()
self.cc0_license = NodeLicense.find_one(Q('name', 'eq', 'CC0 1.0 Universal'))
self.mit_license = NodeLicense.find_one(Q('name', 'eq', 'MIT License'))
self.no_license = NodeLicense.find_one(Q('name', 'eq', 'No license'))
self.preprint_provider.licenses_acceptable = [self.cc0_license, self.no_license]
self.preprint_provider.save()
self.url = '/{}preprints/{}/'.format(API_BASE, self.preprint._id)
def make_payload(self, node_id, license_id=None, license_year=None, copyright_holders=None):
attributes = {}
if license_year and copyright_holders:
attributes = {
'license_record': {
'year': license_year,
'copyright_holders': copyright_holders
}
}
elif license_year:
attributes = {
'license_record': {
'year': license_year
}
}
elif copyright_holders:
attributes = {
'license_record': {
'copyright_holders': copyright_holders
}
}
return {
'data': {
'id': node_id,
'attributes': attributes,
'relationships': {
'license': {
'data': {
'type': 'licenses',
'id': license_id
}
}
}
}
} if license_id else {
'data': {
'id': node_id,
'attributes': attributes
}
}
def make_request(self, url, data, auth=None, expect_errors=False):
return self.app.patch_json_api(url, data, auth=auth, expect_errors=expect_errors)
def test_admin_can_update_license(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id
)
assert_equal(self.preprint.license, None)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.license.node_license, self.cc0_license)
assert_equal(self.preprint.license.year, None)
assert_equal(self.preprint.license.copyright_holders, [])
# check logs
log = self.preprint.node.logs[-1]
assert_equal(log.action, 'preprint_license_updated')
assert_equal(log.params.get('preprint'), self.preprint._id)
def test_admin_can_update_license_record(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.no_license._id,
license_year='2015',
copyright_holders=['Bojack Horseman, Princess Carolyn']
)
assert_equal(self.preprint.license, None)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.license.node_license, self.no_license)
assert_equal(self.preprint.license.year, '2015')
assert_equal(self.preprint.license.copyright_holders, ['Bojack Horseman, Princess Carolyn'])
def test_rw_contributor_cannot_update_license(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id
)
res = self.make_request(self.url, data, auth=self.rw_contributor.auth, expect_errors=True)
assert_equal(res.status_code, 403)
assert_equal(res.json['errors'][0]['detail'], 'User must be an admin to update a preprint.')
def test_read_contributor_cannot_update_license(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id
)
res = self.make_request(self.url, data, auth=self.read_contributor.auth, expect_errors=True)
assert_equal(res.status_code, 403)
assert_equal(res.json['errors'][0]['detail'], 'You do not have permission to perform this action.')
def test_non_contributor_cannot_update_license(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id
)
res = self.make_request(self.url, data, auth=self.non_contributor.auth, expect_errors=True)
assert_equal(res.status_code, 403)
assert_equal(res.json['errors'][0]['detail'], 'You do not have permission to perform this action.')
def test_unauthenticated_user_cannot_update_license(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id
)
res = self.make_request(self.url, data, expect_errors=True)
assert_equal(res.status_code, 401)
assert_equal(res.json['errors'][0]['detail'], 'Authentication credentials were not provided.')
def test_update_preprint_with_invalid_license_for_provider(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.mit_license._id
)
assert_equal(self.preprint.license, None)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth, expect_errors=True)
assert_equal(res.status_code, 403)
assert_equal(res.json['errors'][0]['detail'], 'Invalid license chosen for {}'.format(self.preprint_provider.name))
def test_update_preprint_with_existing_license_year_attribute_only(self):
self.preprint.set_preprint_license(
{
'id': self.no_license.id,
'year': '2014',
'copyrightHolders': ['Diane', 'Mr. Peanut Butter']
},
Auth(self.admin_contributor),
)
self.preprint.save()
assert_equal(self.preprint.license.node_license, self.no_license)
assert_equal(self.preprint.license.year, '2014')
assert_equal(self.preprint.license.copyright_holders, ['Diane', 'Mr. Peanut Butter'])
data = self.make_payload(
node_id=self.preprint._id,
license_year='2015'
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
assert_equal(res.status_code, 200)
self.preprint.license.reload()
assert_equal(self.preprint.license.node_license, self.no_license)
assert_equal(self.preprint.license.year, '2015')
assert_equal(self.preprint.license.copyright_holders, ['Diane', 'Mr. Peanut Butter'])
def test_update_preprint_with_existing_license_copyright_holders_attribute_only(self):
self.preprint.set_preprint_license(
{
'id': self.no_license.id,
'year': '2014',
'copyrightHolders': ['Diane', 'Mr. Peanut Butter']
},
Auth(self.admin_contributor),
)
self.preprint.save()
assert_equal(self.preprint.license.node_license, self.no_license)
assert_equal(self.preprint.license.year, '2014')
assert_equal(self.preprint.license.copyright_holders, ['Diane', 'Mr. Peanut Butter'])
data = self.make_payload(
node_id=self.preprint._id,
copyright_holders=['Bojack Horseman', 'Princess Carolyn']
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
assert_equal(res.status_code, 200)
self.preprint.license.reload()
assert_equal(self.preprint.license.node_license, self.no_license)
assert_equal(self.preprint.license.year, '2014')
assert_equal(self.preprint.license.copyright_holders, ['Bojack Horseman', 'Princess Carolyn'])
def test_update_preprint_with_existing_license_relationship_only(self):
self.preprint.set_preprint_license(
{
'id': self.no_license.id,
'year': '2014',
'copyrightHolders': ['Diane', 'Mr. Peanut Butter']
},
Auth(self.admin_contributor),
)
self.preprint.save()
assert_equal(self.preprint.license.node_license, self.no_license)
assert_equal(self.preprint.license.year, '2014')
assert_equal(self.preprint.license.copyright_holders, ['Diane', 'Mr. Peanut Butter'])
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
assert_equal(res.status_code, 200)
self.preprint.license.reload()
assert_equal(self.preprint.license.node_license, self.cc0_license)
assert_equal(self.preprint.license.year, '2014')
assert_equal(self.preprint.license.copyright_holders, ['Diane', 'Mr. Peanut Butter'])
def test_update_preprint_with_existing_license_relationship_and_attributes(self):
self.preprint.set_preprint_license(
{
'id': self.no_license.id,
'year': '2014',
'copyrightHolders': ['Diane', 'Mr. Peanut Butter']
},
Auth(self.admin_contributor),
save=True
)
assert_equal(self.preprint.license.node_license, self.no_license)
assert_equal(self.preprint.license.year, '2014')
assert_equal(self.preprint.license.copyright_holders, ['Diane', 'Mr. Peanut Butter'])
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id,
license_year='2015',
copyright_holders=['Bojack Horseman', 'Princess Carolyn']
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
assert_equal(res.status_code, 200)
self.preprint.license.reload()
assert_equal(self.preprint.license.node_license, self.cc0_license)
assert_equal(self.preprint.license.year, '2015')
assert_equal(self.preprint.license.copyright_holders, ['Bojack Horseman', 'Princess Carolyn'])
def test_update_preprint_license_without_required_year_in_payload(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.no_license._id,
copyright_holders=['Rick', 'Morty']
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth, expect_errors=True)
assert_equal(res.status_code, 400)
assert_equal(res.json['errors'][0]['detail'], 'year must be specified for this license')
def test_update_preprint_license_without_required_copyright_holders_in_payload_(self):
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.no_license._id,
license_year='1994'
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth, expect_errors=True)
assert_equal(res.status_code, 400)
assert_equal(res.json['errors'][0]['detail'], 'copyrightHolders must be specified for this license')
def test_update_preprint_license_does_not_change_project_license(self):
self.preprint.node.set_node_license(
{
'id': self.no_license.id,
'year': '2015',
'copyrightHolders': ['Simba', 'Mufasa']
},
auth=Auth(self.admin_contributor)
)
self.preprint.node.save()
assert_equal(self.preprint.node.node_license.node_license, self.no_license)
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.cc0_license._id
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.license.node_license, self.cc0_license)
assert_equal(self.preprint.node.node_license.node_license, self.no_license)
def test_update_preprint_license_without_change_does_not_add_log(self):
self.preprint.set_preprint_license(
{
'id': self.no_license.id,
'year': '2015',
'copyrightHolders': ['Kim', 'Kanye']
},
auth=Auth(self.admin_contributor),
save=True
)
before_num_logs = len(self.preprint.node.logs)
before_update_log = self.preprint.node.logs[-1]
data = self.make_payload(
node_id=self.preprint._id,
license_id=self.no_license._id,
license_year='2015',
copyright_holders=['Kanye', 'Kim']
)
res = self.make_request(self.url, data, auth=self.admin_contributor.auth)
self.preprint.node.reload()
after_num_logs = len(self.preprint.node.logs)
after_update_log = self.preprint.node.logs[-1]
assert_equal(res.status_code, 200)
assert_equal(before_num_logs, after_num_logs)
assert_equal(before_update_log._id, after_update_log._id)
class TestPreprintRelationshipPreprintProvider(ApiTestCase):
def setUp(self):
super(TestPreprintRelationshipPreprintProvider, self).setUp()
self.user = AuthUserFactory()
self.read_write_user = AuthUserFactory()
self.preprint = PreprintFactory(creator=self.user, providers=None)
self.preprint.add_contributor(self.read_write_user)
self.preprint.save()
self.preprint_provider_one = PreprintProviderFactory()
self.preprint_provider_two = PreprintProviderFactory()
self.preprint_preprint_providers_url = self.create_url(self.preprint._id)
def create_url(self, preprint_id):
return '/{0}preprints/{1}/relationships/preprint_providers/'.format(API_BASE, preprint_id)
def create_payload(self, *preprint_provider_ids):
data = []
for provider_id in preprint_provider_ids:
data.append({'type': 'preprint_providers', 'id': provider_id})
return {'data': data}
def test_add_preprint_providers(self):
assert_equal(self.preprint.preprint_providers, None)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id, self.preprint_provider_two._id),
auth=self.user.auth
)
assert_equal(res.status_code, 201)
# check the relationship
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_in(self.preprint_provider_two, self.preprint.preprint_providers)
def test_add_through_patch_one_provider_while_removing_other(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_not_in(self.preprint_provider_two, self.preprint.preprint_providers)
res = self.app.patch_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.user.auth
)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_not_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_in(self.preprint_provider_two, self.preprint.preprint_providers)
def test_add_through_post_to_preprint_with_provider(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_not_in(self.preprint_provider_two, self.preprint.preprint_providers)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.user.auth
)
assert_equal(res.status_code, 201)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_in(self.preprint_provider_two, self.preprint.preprint_providers)
def test_add_provider_with_no_permissions(self):
new_user = AuthUserFactory()
new_user.save()
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=new_user.auth,
expect_errors=True,
)
assert_equal(res.status_code, 403)
def test_delete_nothing(self):
res = self.app.delete_json_api(
self.preprint_preprint_providers_url,
self.create_payload(),
auth=self.user.auth
)
assert_equal(res.status_code, 204)
def test_remove_providers(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
self.create_payload(),
auth=self.user.auth
)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_providers, [])
def test_remove_providers_with_no_auth(self):
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
self.create_payload(),
expect_errors=True
)
assert_equal(res.status_code, 401)
def test_using_post_making_no_changes_returns_204(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=self.user.auth
)
assert_equal(res.status_code, 204)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_delete_user_is_admin(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.delete_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=self.user.auth
)
assert_equal(res.status_code, 204)
self.preprint.reload()
assert_not_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_delete_provider_user_is_read_write(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.delete_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=self.read_write_user.auth,
expect_errors=True
)
assert_equal(res.status_code, 403)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_add_provider_user_is_read_write(self):
self.preprint.preprint_providers = []
self.preprint.preprint_providers.append(self.preprint_provider_one)
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.read_write_user.auth,
expect_errors=True
)
assert_equal(res.status_code, 403)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_change_provider_user_is_read_write(self):
self.preprint.preprint_providers = []
self.preprint.preprint_providers.append(self.preprint_provider_one)
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.read_write_user.auth,
expect_errors=True
)
assert_equal(res.status_code, 403)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_get_relationship_information(self):
res = self.app.get(self.preprint_preprint_providers_url,auth=self.user.auth)
assert_equal(res.status_code, 200)
def test_invalid_relationship_type(self):
invalid_type_payload = self.create_payload(self.preprint_provider_one._id)
invalid_type_payload['data'][0]['type'] = 'socks'
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
invalid_type_payload,
auth=self.user.auth,
expect_errors=True
)
assert_equal(res.status_code, 409)
def test_provider_does_not_exist(self):
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload('nope nope nope'),
auth=self.user.auth,
expect_errors=True
)
assert_equal(res.status_code, 404)
class TestPreprintRelationshipPreprintProvider(ApiTestCase):
def setUp(self):
super(TestPreprintRelationshipPreprintProvider, self).setUp()
self.user = AuthUserFactory()
self.read_write_user = AuthUserFactory()
self.preprint = PreprintFactory(creator=self.user, providers=None)
self.preprint.add_contributor(self.read_write_user)
self.preprint.save()
self.preprint_provider_one = PreprintProviderFactory()
self.preprint_provider_two = PreprintProviderFactory()
self.preprint_preprint_providers_url = self.create_url(self.preprint._id)
def create_url(self, preprint_id):
return '/{0}preprints/{1}/relationships/preprint_providers/'.format(API_BASE, preprint_id)
def create_payload(self, *preprint_provider_ids):
data = []
for provider_id in preprint_provider_ids:
data.append({'type': 'preprint_providers', 'id': provider_id})
return {'data': data}
def test_add_preprint_providers(self):
assert_equal(self.preprint.preprint_providers, None)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id, self.preprint_provider_two._id),
auth=self.user.auth
)
assert_equal(res.status_code, 201)
# check the relationship
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_in(self.preprint_provider_two, self.preprint.preprint_providers)
def test_add_preprint_providers_permission_denied(self):
noncontrib = AuthUserFactory()
assert_equal(self.preprint.preprint_providers, None)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id, self.preprint_provider_two._id),
auth=noncontrib.auth,
expect_errors=True
)
assert_equal(res.status_code, 403)
def test_add_through_patch_one_provider_while_removing_other(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_not_in(self.preprint_provider_two, self.preprint.preprint_providers)
res = self.app.patch_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.user.auth
)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_not_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_in(self.preprint_provider_two, self.preprint.preprint_providers)
def test_add_through_post_to_preprint_with_provider(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_not_in(self.preprint_provider_two, self.preprint.preprint_providers)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.user.auth
)
assert_equal(res.status_code, 201)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
assert_in(self.preprint_provider_two, self.preprint.preprint_providers)
def test_add_provider_with_no_permissions(self):
new_user = AuthUserFactory()
new_user.save()
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=new_user.auth,
expect_errors=True,
)
assert_equal(res.status_code, 403)
def test_delete_nothing(self):
res = self.app.delete_json_api(
self.preprint_preprint_providers_url,
self.create_payload(),
auth=self.user.auth
)
assert_equal(res.status_code, 204)
def test_remove_providers(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
self.create_payload(),
auth=self.user.auth
)
assert_equal(res.status_code, 200)
self.preprint.reload()
assert_equal(self.preprint.preprint_providers, [])
def test_remove_providers_with_no_auth(self):
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
self.create_payload(),
expect_errors=True
)
assert_equal(res.status_code, 401)
def test_using_post_making_no_changes_returns_204(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=self.user.auth
)
assert_equal(res.status_code, 204)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_delete_user_is_admin(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.delete_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=self.user.auth
)
assert_equal(res.status_code, 204)
self.preprint.reload()
assert_not_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_delete_provider_user_is_read_write(self):
self.preprint.preprint_providers = [self.preprint_provider_one]
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.delete_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_one._id),
auth=self.read_write_user.auth,
expect_errors=True
)
assert_equal(res.status_code, 403)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_add_provider_user_is_read_write(self):
self.preprint.preprint_providers = []
self.preprint.preprint_providers.append(self.preprint_provider_one)
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.read_write_user.auth,
expect_errors=True
)
assert_equal(res.status_code, 403)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_change_provider_user_is_read_write(self):
self.preprint.preprint_providers = []
self.preprint.preprint_providers.append(self.preprint_provider_one)
self.preprint.save()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
self.create_payload(self.preprint_provider_two._id),
auth=self.read_write_user.auth,
expect_errors=True
)
assert_equal(res.status_code, 403)
self.preprint.reload()
assert_in(self.preprint_provider_one, self.preprint.preprint_providers)
def test_get_relationship_information(self):
res = self.app.get(self.preprint_preprint_providers_url,auth=self.user.auth)
assert_equal(res.status_code, 200)
def test_invalid_relationship_type(self):
invalid_type_payload = self.create_payload(self.preprint_provider_one._id)
invalid_type_payload['data'][0]['type'] = 'socks'
res = self.app.put_json_api(
self.preprint_preprint_providers_url,
invalid_type_payload,
auth=self.user.auth,
expect_errors=True
)
assert_equal(res.status_code, 409)
def test_provider_does_not_exist(self):
res = self.app.post_json_api(
self.preprint_preprint_providers_url,
self.create_payload('nope nope nope'),
auth=self.user.auth,
expect_errors=True
)
assert_equal(res.status_code, 404)
