tests/org/cacert/gigi/pages/orga/TestOrgaManagement.java

   1 package org.cacert.gigi.pages.orga;
   2
   3 import static org.hamcrest.CoreMatchers.*;
   4 import static org.junit.Assert.*;
   5
   6 import java.io.IOException;
   7 import java.net.HttpURLConnection;
   8 import java.net.URLConnection;
   9 import java.net.URLEncoder;
  10 import java.sql.SQLException;
  11 import java.util.List;
  12
  13 import org.cacert.gigi.GigiApiException;
  14 import org.cacert.gigi.dbObjects.Group;
  15 import org.cacert.gigi.dbObjects.Organisation;
  16 import org.cacert.gigi.dbObjects.Organisation.Affiliation;
  17 import org.cacert.gigi.dbObjects.User;
  18 import org.cacert.gigi.pages.account.MyDetails;
  19 import org.cacert.gigi.testUtils.ClientTest;
  20 import org.cacert.gigi.testUtils.IOUtils;
  21 import org.junit.After;
  22 import org.junit.Test;
  23
  24 public class TestOrgaManagement extends ClientTest {
  25
  26     public TestOrgaManagement() throws IOException {
  27         u.grantGroup(u, Group.ORGASSURER);
  28         makeAssurer(u.getId());
  29         clearCaches();
  30         cookie = login(email, TEST_PASSWORD);
  31     }
  32
  33     @After
  34     public void purgeDbAfterTest() throws SQLException, IOException {
  35         purgeDatabase();
  36     }
  37
  38     @Test
  39     public void testAdd() throws IOException {
  40         for (Organisation i : Organisation.getOrganisations(0, 30)) {
  41             i.delete();
  42         }
  43         executeBasicWebInteraction(cookie, CreateOrgPage.DEFAULT_PATH, "action=new&O=name&contact=mail&L=K%C3%B6ln&ST=%C3%9C%C3%96%C3%84%C3%9F&C=DE&comments=jkl%C3%B6loiuzfdfgjlh%C3%B6", 0);
  44         Organisation[] orgs = Organisation.getOrganisations(0, 30);
  45         assertEquals(1, orgs.length);
  46         assertEquals("mail", orgs[0].getContactEmail());
  47         assertEquals("name", orgs[0].getName());
  48         assertEquals("Köln", orgs[0].getCity());
  49         assertEquals("ÜÖÄß", orgs[0].getProvince());
  50
  51         User u2 = User.getById(createAssuranceUser("testworker", "testname", createUniqueName() + "@testdom.com", TEST_PASSWORD));
  52         executeBasicWebInteraction(cookie, ViewOrgPage.DEFAULT_PATH + "/" + orgs[0].getId(), "email=" + URLEncoder.encode(u2.getEmail(), "UTF-8") + "&do_affiliate=y&master=y", 1);
  53         List<Affiliation> allAdmins = orgs[0].getAllAdmins();
  54         assertEquals(1, allAdmins.size());
  55         Affiliation affiliation = allAdmins.get(0);
  56         assertSame(u2, affiliation.getTarget());
  57         assertTrue(affiliation.isMaster());
  58
  59         executeBasicWebInteraction(cookie, ViewOrgPage.DEFAULT_PATH + "/" + orgs[0].getId(), "email=" + URLEncoder.encode(u.getEmail(), "UTF-8") + "&do_affiliate=y", 1);
  60         allAdmins = orgs[0].getAllAdmins();
  61         assertEquals(2, allAdmins.size());
  62         Affiliation affiliation2 = allAdmins.get(0);
  63         if (affiliation2.getTarget().getId() == u2.getId()) {
  64             affiliation2 = allAdmins.get(1);
  65         }
  66         assertEquals(u.getId(), affiliation2.getTarget().getId());
  67         assertFalse(affiliation2.isMaster());
  68
  69         executeBasicWebInteraction(cookie, ViewOrgPage.DEFAULT_PATH + "/" + orgs[0].getId(), "del=" + URLEncoder.encode(u.getEmail(), "UTF-8") + "&email=&do_affiliate=y", 1);
  70         assertEquals(1, orgs[0].getAllAdmins().size());
  71
  72         executeBasicWebInteraction(cookie, ViewOrgPage.DEFAULT_PATH + "/" + orgs[0].getId(), "del=" + URLEncoder.encode(u2.getEmail(), "UTF-8") + "&email=&do_affiliate=y", 1);
  73         assertEquals(0, orgs[0].getAllAdmins().size());
  74
  75         executeBasicWebInteraction(cookie, ViewOrgPage.DEFAULT_PATH + "/" + orgs[0].getId(), "action=updateCertificateData&O=name1&contact=&L=K%C3%B6ln&ST=%C3%9C%C3%96%C3%84%C3%9F&C=DE&comments=jkl%C3%B6loiuzfdfgjlh%C3%B6", 0);
  76         clearCaches();
  77         orgs = Organisation.getOrganisations(0, 30);
  78         assertEquals("name1", orgs[0].getName());
  79     }
  80
  81     @Test
  82     public void testNonAssurerSeeOnlyOwn() throws IOException, GigiApiException {
  83         User u2 = User.getById(createAssuranceUser("testworker", "testname", createUniqueName() + "@testdom.com", TEST_PASSWORD));
  84         Organisation o1 = new Organisation("name21", "DE", "sder", "Rostov", "email", "", "", u);
  85         Organisation o2 = new Organisation("name12", "DE", "sder", "Rostov", "email", "", "", u);
  86         o1.addAdmin(u2, u, false);
  87         String session2 = login(u2.getEmail(), TEST_PASSWORD);
  88
  89         URLConnection uc = get(session2, ViewOrgPage.DEFAULT_PATH);
  90         assertEquals(403, ((HttpURLConnection) uc).getResponseCode());
  91
  92         uc = get(session2, MyDetails.PATH);
  93         String content = IOUtils.readURL(uc);
  94         assertThat(content, containsString("name21"));
  95         assertThat(content, not(containsString("name12")));
  96         uc = get(session2, ViewOrgPage.DEFAULT_PATH + "/" + o1.getId());
  97         assertEquals(403, ((HttpURLConnection) uc).getResponseCode());
  98         uc = get(session2, ViewOrgPage.DEFAULT_PATH + "/" + o2.getId());
  99         assertEquals(403, ((HttpURLConnection) uc).getResponseCode());
 100
 101         uc = get(ViewOrgPage.DEFAULT_PATH);
 102         content = IOUtils.readURL(uc);
 103         assertThat(content, containsString("name21"));
 104         assertThat(content, containsString("name12"));
 105         uc = get(ViewOrgPage.DEFAULT_PATH + "/" + o1.getId());
 106         assertEquals(200, ((HttpURLConnection) uc).getResponseCode());
 107         uc = get(ViewOrgPage.DEFAULT_PATH + "/" + o2.getId());
 108         assertEquals(200, ((HttpURLConnection) uc).getResponseCode());
 109         o1.delete();
 110         o2.delete();
 111     }
 112
 113     @Test
 114     public void testAffiliationRights() throws IOException, GigiApiException {
 115         User u2 = User.getById(createAssuranceUser("testworker", "testname", createUniqueName() + "@testdom.com", TEST_PASSWORD));
 116         User u3 = User.getById(createAssuranceUser("testmaster", "testname", createUniqueName() + "@testdom.com", TEST_PASSWORD));
 117         User u4_dummy = User.getById(createVerifiedUser("testmaster", "testname", createUniqueName() + "@testdom.com", TEST_PASSWORD));
 118         Organisation o1 = new Organisation("name21", "DE", "sder", "Rostov", "email", "", "", u);
 119         o1.addAdmin(u3, u, true);
 120         try {
 121             // must fail because u4 is no assurer
 122             o1.addAdmin(u4_dummy, u3, false);
 123             fail("No exception!");
 124         } catch (GigiApiException e) {
 125         }
 126         o1.addAdmin(u2, u3, false);
 127         try {
 128             // must fail because u2 may not add admins
 129             o1.addAdmin(u3, u2, false);
 130             fail("No exception!");
 131         } catch (GigiApiException e) {
 132         }
 133         try {
 134             // must fail because u4 is no assurer
 135             o1.addAdmin(u4_dummy, u, false);
 136             fail("No exception!");
 137         } catch (GigiApiException e) {
 138         }
 139         o1.removeAdmin(u2, u3);
 140         o1.removeAdmin(u3, u3);
 141         assertEquals(0, o1.getAllAdmins().size());
 142         o1.delete();
 143     }
 144 }