]> WPIA git - motion.git/blob - tests/test_motion.py
Merge remote-tracking branch 'gitlab/master' into unittest-fix
[motion.git] / tests / test_motion.py
1 from datetime import datetime
2 from tests.test_basics import BasicTest
3
4 # no specific rights required
5 class GeneralTests(BasicTest):
6
7     def setUp(self):
8         self.init_test()
9         global user
10         user = 'testuser/'
11         global userid
12         userid = 4
13         self.db_sampledata()
14
15     def tearDown(self):
16         pass
17
18     def test_main_page(self):
19         response = self.app.get('/', environ_base={'USER_ROLES': user}, follow_redirects=True)
20         self.assertEqual(response.status_code, 200)
21
22     def test_basic_results_data(self):
23         result = self.app.get('/', environ_base={'USER_ROLES': user}, follow_redirects=True)
24         testtext= '<div class="motion card" id="motion-3">\n  <div class="motion-title card-heading alert-warning">'\
25             + '\n    <span class="title-text">Motion C</span> (Canceled)\n    <span class="motion-type">group1</span>'\
26             + '\n    <div># g1.20200402.003'\
27             + '\n    <a class="btn btn-primary" href="/motion/g1.20200402.003" role="button">Result</a>'\
28             + '\n    </div>\n    <div class="date">'\
29             + '\n      <div>Proposed: 2020-04-02 21:47:24 (UTC) by User A</div>'\
30             + '\n      <div>Canceled: 2020-04-03 21:48:24 (UTC) by User A</div>\n     </div>\n  </div>'\
31             + '\n  <div class="card-body">\n    <p><p>A third motion</p></p>'\
32             + '\n    <p>\nYes <span class="badge badge-pill badge-secondary">1</span><br>'\
33             + '\nNo <span class="badge badge-pill badge-secondary">0</span><br>'\
34             + '\nAbstain <span class="badge badge-pill badge-secondary">0</span><br>\n    </p>'\
35             + '\n    <p>Cancelation reason: Entered with wrong text</p>\n  </div>\n</div>\n'
36         self.assertIn(str.encode(testtext), result.data)
37         testtext= '<div class="motion card" id="motion-2">\n  <div class="motion-title card-heading alert-danger">'\
38             + '\n    <span class="title-text">Motion B</span> (Finished)\n    <span class="motion-type">group1</span>'\
39             + '\n    <div># g1.20200402.002'\
40             + '\n    <a class="btn btn-primary" href="/motion/g1.20200402.002" role="button">Result</a>'\
41             + '\n    </div>\n    <div class="date">\n      <div>Proposed: 2020-04-02 21:41:26 (UTC) by User A</div>'\
42             + '\n      <div>Votes until: 2020-04-04 21:41:26 (UTC)</div>\n     </div>\n  </div>'\
43             + '\n  <div class="card-body">\n    <p><p>A second motion</p></p>\n    <p>'\
44             + '\nYes <span class="badge badge-pill badge-secondary">1</span><br>'\
45             + '\nNo <span class="badge badge-pill badge-secondary">2</span><br>'\
46             + '\nAbstain <span class="badge badge-pill badge-secondary">0</span><br>\n    </p>\n  </div>\n</div>\n'
47         self.assertIn(str.encode(testtext), result.data)
48         testtext= '<div class="motion card" id="motion-1">\n  <div class="motion-title card-heading alert-success">'\
49             + '\n    <span class="title-text">Motion A</span> (Finished)\n    <span class="motion-type">group1</span>'\
50             + '\n    <div># g1.20200402.001'\
51             + '\n    <a class="btn btn-primary" href="/motion/g1.20200402.001" role="button">Result</a>'\
52             + '\n    </div>\n    <div class="date">\n      <div>Proposed: 2020-04-02 21:40:33 (UTC) by User A</div>'\
53             + '\n      <div>Votes until: 2020-04-02 21:40:33 (UTC)</div>\n     </div>\n  </div>'\
54             + '\n  <div class="card-body">\n    <p><p>My special motion</p></p>\n    <p>'\
55             + '\nYes <span class="badge badge-pill badge-secondary">2</span><br>'\
56             + '\nNo <span class="badge badge-pill badge-secondary">1</span><br>'\
57             + '\nAbstain <span class="badge badge-pill badge-secondary">0</span><br>\n    </p>\n  </div>\n</div>\n'
58         self.assertIn(str.encode(testtext), result.data)
59         testtext= 'Proxy management'
60         self.assertNotIn(str.encode(testtext), result.data)
61
62         # start with second motion
63         result = self.app.get('/', environ_base={'USER_ROLES': user}, query_string=dict(start=2))
64         testtext= 'id=\"motion-3\">'
65         self.assertNotIn(str.encode(testtext), result.data)
66         testtext= 'id=\"motion-2">'
67         self.assertIn(str.encode(testtext), result.data)
68         testtext= 'id=\"motion-1\">'
69         self.assertIn(str.encode(testtext), result.data)
70
71     def test_basic_results_data_details(self):
72         motion='g1.20200402.002'
73         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
74         testtext= '<p>A second motion</p></p>\n  </div>\n</div>\n<a href=\"/?start=2#motion-2\" class=\"btn btn-primary\">Back</a>'
75         self.assertIn(str.encode(testtext), result.data)
76
77     def test_vote(self):
78         motion='g1.20200402.004'
79         response = self.createVote(user, motion, 'yes', userid)
80         self.assertEqual(response.status_code, 403)
81         self.assertIn(str.encode('Forbidden'), response.data)
82
83     def test_no_user(self):
84         result = self.app.get('/', follow_redirects=True)
85         self.assertEqual(result.status_code, 500)
86         self.assertIn(str.encode('Server misconfigured'), result.data)
87
88     def test_user_invalid(self):
89         result = self.app.get('/', environ_base={'USER_ROLES': '<invalid>/'}, follow_redirects=True)
90         self.assertEqual(result.status_code, 403)
91         self.assertIn(str.encode('Access denied'), result.data)
92
93     def test_basic_env(self):
94         result = self.app.get('/', environ_base={'USER': 'testuser', 'ROLES':''}, follow_redirects=True)
95         testtext= 'id=\"motion-3\">'
96         self.assertIn(str.encode(testtext), result.data)
97
98     def test_basic_results_data_details_not_given(self):
99         motion='g1.30190402.001'
100         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
101         self.assertEqual(result.status_code, 404)
102         self.assertIn(str.encode('Error, Not found'), result.data)
103
104     def test_no_proxy(self):
105         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
106         self.assertEqual(result.status_code, 403)
107         self.assertIn(str.encode('Forbidden'), result.data)
108
109     def test_no_proxy_add(self):
110         result = self.app.post('proxy/add', environ_base={'USER_ROLES': user}, follow_redirects=True)
111         self.assertEqual(result.status_code, 403)
112         self.assertIn(str.encode('Forbidden'), result.data)
113
114     def test_no_proxy_revoke(self):
115         result = self.app.post('proxy/revoke', environ_base={'USER_ROLES': user}, follow_redirects=True)
116         self.assertEqual(result.status_code, 403)
117         self.assertIn(str.encode('Forbidden'), result.data)
118
119     def test_no_proxy_revokeAll(self):
120         result = self.app.post('proxy/revokeall', environ_base={'USER_ROLES': user}, follow_redirects=True)
121         self.assertEqual(result.status_code, 403)
122         self.assertIn(str.encode('Forbidden'), result.data)
123         
124 class VoterTests(BasicTest):
125
126     def setUp(self):
127         self.init_test()
128         global user
129         user='testuser/vote:*'
130         global userid
131         userid = 4
132         self.db_sampledata()
133
134     def tearDown(self):
135         pass
136
137     def test_main_page(self):
138         response = self.app.get('/', environ_base={'USER_ROLES': user}, follow_redirects=True)
139         self.assertEqual(response.status_code, 200)
140
141     def test_home_data(self):
142         result = self.app.get('/', environ_base={'USER_ROLES': user})
143         self.assertNotIn("<select class=\"float form-control\" name=\"category\">", str(result.data) )
144
145     def test_vote_yes(self):
146         motion='g1.20200402.004'
147         response = self.createVote(user, motion, 'yes', userid)
148         self.assertEqual(response.status_code, 302)
149         result = self.app.get('/', environ_base={'USER_ROLES': user})
150         resulttext=self.buildResultText('A fourth motion', 1, 0, 0)
151         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
152         testtext= 'class=\"btn btn-success\" name=\"vote\" value="yes" id="vote-yes">Yes</button>'
153         self.assertIn(str.encode(testtext), result.data)
154         testtext= 'class=\"btn btn-primary\" name=\"vote\" value=\"no\" id=\"vote-no\">No</button>'
155         self.assertIn(str.encode(testtext), result.data)
156         testtext= 'class=\"btn btn-primary\" name=\"vote\" value=\"abstain\" id=\"vote-abstain\">Abstain</button>'
157         self.assertIn(str.encode(testtext), result.data)
158
159     def test_vote_no(self):
160         motion='g1.20200402.004'
161         response = self.createVote(user, motion, 'no', userid)
162         self.assertEqual(response.status_code, 302)
163         result = self.app.get('/', environ_base={'USER_ROLES': user})
164         resulttext=self.buildResultText('A fourth motion', 0, 1, 0)
165         self.assertIn(str.encode(resulttext), result.data)
166         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
167         testtext= 'class="btn btn-primary" name="vote\" value=\"yes\" id=\"vote-yes\">Yes</button>'
168         self.assertIn(str.encode(testtext), result.data)
169         testtext= 'class=\"btn btn-success\" name=\"vote\" value=\"no\" id=\"vote-no\">No</button>'
170         self.assertIn(str.encode(testtext), result.data)
171         testtext= 'class=\"btn btn-primary\" name=\"vote\" value=\"abstain\" id=\"vote-abstain\">Abstain</button>'
172         self.assertIn(str.encode(testtext), result.data)
173
174     def test_vote_abstain(self):
175         motion='g1.20200402.004'
176         response = self.createVote(user, motion, 'abstain', userid)
177         self.assertEqual(response.status_code, 302)
178         result = self.app.get('/', environ_base={'USER_ROLES': user})
179         resulttext=self.buildResultText('A fourth motion', 0, 0, 1)
180         self.assertIn(str.encode(resulttext), result.data)
181         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
182         testtext= 'class=\"btn btn-primary\" name=\"vote\" value=\"yes\" id=\"vote-yes\">Yes</button>'
183         self.assertIn(str.encode(testtext), result.data)
184         testtext= 'class=\"btn btn-primary\" name=\"vote\" value=\"no\" id=\"vote-no\">No</button>'
185         self.assertIn(str.encode(testtext), result.data)
186         testtext= 'class=\"btn btn-success\" name=\"vote\" value=\"abstain\" id=\"vote-abstain\">Abstain</button>'
187         self.assertIn(str.encode(testtext), result.data)
188
189     def test_vote_change(self):
190         motion='g1.20200402.004'
191         response = self.createVote(user, motion, 'yes', userid)
192         self.assertEqual(response.status_code, 302)
193         result = self.app.get('/', environ_base={'USER_ROLES': user})
194         resulttext=self.buildResultText('A fourth motion', 1, 0, 0)
195         self.assertIn(str.encode(resulttext), result.data)
196         response = self.createVote(user, motion, 'no', userid)
197         self.assertEqual(response.status_code, 302)
198         result = self.app.get('/', environ_base={'USER_ROLES': user})
199         resulttext=self.buildResultText('A fourth motion', 0, 1, 0)
200         self.assertIn(str.encode(resulttext), result.data)
201         response = self.createVote(user, motion, 'abstain', userid)
202         self.assertEqual(response.status_code, 302)
203         result = self.app.get('/', environ_base={'USER_ROLES': user})
204         resulttext=self.buildResultText('A fourth motion', 0, 0, 1)
205         self.assertIn(str.encode(resulttext), result.data)
206
207     def test_vote_group(self):
208         motion='g1.20200402.004'
209         response = self.createVote(user, motion, 'yes', userid)
210         self.assertEqual(response.status_code, 302)
211
212         motion='g1.20200402.004'
213         user1='testuser/vote:group1'
214         response = self.createVote(user1, motion, 'yes', userid)
215         self.assertEqual(response.status_code, 302)
216
217         motion='g1.20200402.004'
218         user1='testuser/vote:group1 vote:group2'
219         response = self.createVote(user1, motion, 'yes', userid)
220         self.assertEqual(response.status_code, 302)
221
222     def test_vote_wrong_group(self):
223         motion='g1.20200402.004'
224         user1='testuser/vote:group2'
225         response = self.createVote(user1, motion, 'yes', userid)
226         self.assertEqual(response.status_code, 403)
227         self.assertIn(str.encode('Forbidden'), response.data)
228
229     def test_vote_closed(self):
230         motion='g1.20200402.002'
231         response = self.createVote(user, motion, 'abstain', userid)
232         self.assertEqual(response.status_code, 403)
233         self.assertIn(str.encode('Error, out of time'), response.data)
234
235     def test_vote_canceled(self):
236         motion='g1.20200402.003'
237         response = self.createVote(user, motion, 'abstain', userid)
238         self.assertEqual(response.status_code, 403)
239         self.assertIn(str.encode('Error, motion was canceled'), response.data)
240
241     def test_vote_not_given(self):
242         motion='g1.30190402.001'
243         response = self.createVote(user, motion, 'abstain', userid)
244         self.assertEqual(response.status_code, 404)
245         self.assertIn(str.encode('Error, Not found'), response.data)
246
247     def test_cancelMotion(self):
248         motion='g1.20200402.004'
249         reason="none"
250         response = self.cancelMotion(user, motion, reason)
251         self.assertEqual(response.status_code, 403)
252         self.assertIn(str.encode('Forbidden'), response.data)
253
254     def test_finishMotion(self):
255         motion='g1.20200402.004'
256         response = self.finishMotion(user, motion)
257         self.assertEqual(response.status_code, 403)
258         self.assertIn(str.encode('Forbidden'), response.data)
259
260     def test_see_old_vote(self):
261         motion='g1.20200402.002'
262         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
263         testtext= '<div>Proposed: 2020-04-02 21:41:26 (UTC) by User A</div>\n      <div>Votes until: 2020-04-04 21:41:26 (UTC)</div>'\
264             + '\n     </div>\n  </div>\n  <div class="card-body">\n    <p><p>A second motion</p></p>\n  </div>\n</div>'\
265             + '\n<a href="/?start=2#motion-2" class="btn btn-primary">Back</a>'
266         self.assertIn(str.encode(testtext), result.data)
267
268     def test_createMotion(self):
269         title='My Motion'
270         content='My body'
271         response = self.createMotion(user, title, content, '3', 'group1')
272         self.assertEqual(response.status_code, 403)
273         self.assertIn(str.encode('Forbidden'), response.data)
274
275
276 class CreateMotionTests(BasicTest):
277
278     def setUp(self):
279         self.init_test()
280         global user
281         user='testuser/vote:* create:* cancel:* finish:*'
282         self.db_clear()
283
284     def tearDown(self):
285         pass
286
287     def test_main_page(self):
288         response = self.app.get('/', environ_base={'USER_ROLES': user}, follow_redirects=True)
289         self.assertEqual(response.status_code, 200)
290
291     def test_home_data(self):
292         result = self.app.get('/', environ_base={'USER_ROLES': user})
293
294         # assert the response data
295         self.assertIn(b'User: testuser', result.data)
296         self.assertIn("<select class=\"float form-control\" name=\"category\">", str(result.data) )
297
298     def test_createMotion(self):
299         title='My Motion'
300         content='My body'
301         response = self.createMotion(user, title, content, '3', 'group1')
302         self.assertEqual(response.status_code, 302)
303         result = self.app.get('/', environ_base={'USER_ROLES': user})
304         self.assertIn(str.encode(title), result.data)
305         self.assertIn(str.encode(content), result.data)
306         self.assertIn(str.encode('g1.'+datetime.today().strftime('%Y%m%d')+'.001'), result.data)
307         testtext='<a class=\"btn btn-primary" href=\"/motion/g1.'+datetime.today().strftime('%Y%m%d')+'.001\" role=\"button\">Vote</a>'
308         self.assertIn(str.encode(testtext), result.data)
309
310         title='My Motion1'
311         content='My body1'
312         response = self.createMotion(user, title, content, '3', 'group1')
313         self.assertEqual(response.status_code, 302)
314         result = self.app.get('/', environ_base={'USER_ROLES': user})
315         self.assertIn(str.encode(title), result.data)
316         self.assertIn(str.encode(content), result.data)
317         self.assertIn(str.encode('g1.'+datetime.today().strftime('%Y%m%d')+'.002'), result.data)
318
319         title='My Motion2'
320         content='My body2'
321         response = self.createMotion(user, title, content, '3', 'group2')
322         self.assertEqual(response.status_code, 302)
323         result = self.app.get('/', environ_base={'USER_ROLES': user})
324         self.assertIn(str.encode(title), result.data)
325         self.assertIn(str.encode(content), result.data)
326         self.assertIn(str.encode('g2.'+datetime.today().strftime('%Y%m%d')+'.001'), result.data)
327
328         title='My Motion3'
329         content='My body3'
330         user1='testuser/vote:* create:group1 cancel:*'
331         response = self.createMotion(user1, title, content, '3', 'group1')
332         self.assertEqual(response.status_code, 302)
333
334         title='My Motion4'
335         content='My body4'
336         user1='testuser/vote:* create:group1 create:group2 cancel:*'
337         response = self.createMotion(user1, title, content, '3', 'group1')
338         self.assertEqual(response.status_code, 302)
339
340
341     def test_createMotionMarkdown(self):
342         title='Markdown Test'
343         content= 'MyMotionBody MD [text](https//domain.tld/link)'
344         response = self.createMotion(user, title, content, '3', 'group1')
345         self.assertEqual(response.status_code, 302)
346         result = self.app.get('/', environ_base={'USER_ROLES': user})
347         self.assertIn(str.encode(title), result.data)
348         self.assertIn(b'MyMotionBody MD <a href=\"https//domain.tld/link\">text</a>', result.data)
349
350     def test_createMotionMarkdownDirectLink(self):
351         title='Markdown Test Link'
352         content='MyMotionBody MD <a href=\"https//domain.tld/link\">direct</a'
353         response = self.createMotion(user, title, content, '3', 'group1')
354         self.assertEqual(response.status_code, 302)
355         result = self.app.get('/', environ_base={'USER_ROLES': user})
356         self.assertIn(str.encode(title), result.data)
357         self.assertIn(b'MyMotionBody MD &lt;a href="https//domain.tld/link"&gt;direct&lt;/a', result.data)
358
359     def test_createMotionMarkdownCombined(self):
360         title='Markdown Test Link'
361         content='Body [combined](https//domain.tld/link) <a href=\"https//domain.tld/link\">combined1</a'
362         response = self.createMotion(user, title, content, '3', 'group1')
363         self.assertEqual(response.status_code, 302)
364         result = self.app.get('/', environ_base={'USER_ROLES': user})
365         self.assertIn(str.encode(title), result.data)
366         self.assertIn(b'Body <a href=\"https//domain.tld/link\">combined</a> &lt;a href="https//domain.tld/link"&gt;combined1&lt;/a', result.data)
367
368     def test_createMotionWrongDayLength(self):
369         title='My Motion'
370         content='My body'
371         response = self.createMotion(user, title, content, '21', 'group1')
372         self.assertEqual(response.status_code, 400)
373         self.assertIn(str.encode('Error, invalid length'), response.data)
374
375     def test_createMotionMissingData(self):
376         title=''
377         content=''
378         response = self.createMotion(user, title, content, '3', 'group1')
379         self.assertEqual(response.status_code, 400)
380         self.assertIn(str.encode('Error, missing title'), response.data)
381         title='New Motion'
382         response = self.createMotion(user, title, content, '3', 'group1')
383         self.assertEqual(response.status_code, 400)
384         self.assertIn(str.encode('Error, missing content'), response.data)
385         title=''
386         content='New Content'
387         response = self.createMotion(user, title, content, '3', 'group1')
388         self.assertEqual(response.status_code, 400)
389         self.assertIn(str.encode('Error, missing title'), response.data)
390
391     def test_createMotionWrongGroup(self):
392         title='My Motion'
393         content='My body'
394         response = self.createMotion(user, title, content, '3', 'test1')
395         self.assertEqual(response.status_code, 403)
396         self.assertIn(str.encode('Forbidden'), response.data)
397
398         user1='testuser/vote:* create:group1 cancel:*'
399         response = self.createMotion(user1, title, content, '3', 'group2')
400         self.assertEqual(response.status_code, 403)
401         self.assertIn(str.encode('Forbidden'), response.data)
402
403     def test_SeeCancelMotion(self):
404         self.db_sampledata()
405
406         motion='g1.20200402.004'
407         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
408         testtext= '<button type="submit" class="btn btn-danger" name="cancel" value="cancel" id="cancel">Cancel</button>'
409         self.assertIn(str.encode(testtext), result.data)
410
411         motion='g1.20200402.004'
412         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': 'testuser/vote:*'}, follow_redirects=True)
413         testtext= '<button type="submit" class="btn btn-danger" name="cancel" value="cancel" id="cancel">Cancel</button>'
414         self.assertNotIn(str.encode(testtext), result.data)
415
416     def test_cancelMotion(self):
417         self.db_sampledata()
418
419         motion='g1.20200402.004'
420         reason="none"
421         response = self.cancelMotion(user, motion, reason)
422         self.assertEqual(response.status_code, 500)
423         self.assertIn(str.encode('Error, form requires reason'), response.data)
424
425         reason='cancel-test'
426         response = self.cancelMotion(user, motion, reason)
427         self.assertEqual(response.status_code, 302)
428         result = self.app.get('/', environ_base={'USER_ROLES': user})
429         self.assertIn(b'Cancelation reason: ' + str.encode(reason), result.data)
430
431         motion='g1.20190402.001'
432         reason="none"
433         response = self.cancelMotion(user, motion, reason)
434         self.assertEqual(response.status_code, 404)
435         self.assertIn(str.encode('Error, Not found'), response.data)
436
437         motion='g1.30200402.001'
438         reason="cancel-test"
439         response = self.cancelMotion(user, motion, reason)
440         self.assertEqual(response.status_code, 404)
441         self.assertIn(str.encode('Error, Not found'), response.data)
442
443         motion='g1.20200402.004'
444         response = self.cancelMotion(user, motion, reason)
445         self.assertEqual(response.status_code, 403)
446         self.assertIn(str.encode('Error, motion was canceled'), response.data)
447
448     def test_SeeFinishMotion(self):
449         self.db_sampledata()
450
451         motion='g1.20200402.004'
452         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
453         testtext= '<button type="submit" class="btn btn-danger" name="finish" value="finish" id="finish">Finish</button>'
454         self.assertIn(str.encode(testtext), result.data)
455
456         motion='g1.20200402.004'
457         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': 'testuser/vote:*'}, follow_redirects=True)
458         testtext= '<button type="submit" class="btn btn-danger" name="finish" value="finish" id="finish">Finish</button>'
459         self.assertNotIn(str.encode(testtext), result.data)
460
461     def test_finishMotion(self):
462         self.db_sampledata()
463
464         motion='g1.20200402.004'
465         response = self.finishMotion(user, motion)
466         self.assertEqual(response.status_code, 302)
467         result = self.app.get('/', environ_base={'USER_ROLES': user})
468         self.assertIn(b'Motion D</span> (Finished)', result.data)
469
470         motion='g1.30190402.001'
471         response = self.finishMotion(user, motion)
472         self.assertEqual(response.status_code, 404)
473         self.assertIn(str.encode('Error, Not found'), response.data)
474         
475         motion='g1.20200402.001'
476         response = self.finishMotion(user, motion)
477         self.assertEqual(response.status_code, 403)
478         self.assertIn(str.encode('Error, out of time'), response.data)
479
480 class AuditMotionTests(BasicTest):
481
482     def setUp(self):
483         self.init_test()
484         global user
485         user='testuser/audit:*'
486         self.db_sampledata()
487
488     def tearDown(self):
489         pass
490
491     def test_see_old_vote(self):
492         motion='g1.20200402.002'
493         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
494         testtext= '<div class="motion card" id="votes">\n  <div class="card-heading text-white bg-info">\n    Motion Votes\n  </div>'\
495             + '\n  <div class="card-body">\n    <div>User A: yes</div>\n    <div>User B: no</div>'\
496             + '\n    <div>User C: no</div>\n  </div>\n</div>\n<a href="/?start=2#motion-2" class="btn btn-primary">Back</a>'
497         self.assertIn(str.encode(testtext), result.data)
498
499 class ProxyManagementTests(BasicTest):
500
501     def setUp(self):
502         self.init_test()
503         global user
504         user='testuser/proxyadmin:*'
505         self.db_sampledata()
506
507     def tearDown(self):
508         pass
509
510     def test_see_proxy(self):
511         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
512         testtext= 'div class="container">\n<form action="/proxy/add" method="POST">'
513         self.assertIn(str.encode(testtext), result.data)
514         testtext= 'proxy granted to:'
515         self.assertNotIn(str.encode(testtext), result.data)
516         testtext= 'holds proxy of:'
517         self.assertNotIn(str.encode(testtext), result.data)
518         testtext= '<select class="float form-control" name="voter">\n        '\
519             + '<option>User A</option>\n        <option>User B</option>\n        '\
520             + '<option>User C</option>\n        '\
521             + '<option>testuser</option>\n      '\
522             + '</select>\n'
523         self.assertIn(str.encode(testtext), result.data)
524         testtext= '<select class="float form-control" name="proxy">\n          '\
525             + '<option>User A</option>\n          '\
526             + '<option>User B</option>\n          '\
527             + '<option>User C</option>\n          '\
528             + '<option>testuser</option>\n      '\
529             + '</select>\n'
530         self.assertIn(str.encode(testtext), result.data)
531         testtext= '<table>\n      '\
532             + '<thead>\n        '\
533             + '<th>Voter</th>\n        <th>Proxy</th>\n        <th></th>\n      </thead>\n    '\
534             + '</table>\n'
535         self.assertIn(str.encode(testtext), result.data)
536         testtext= '<a class="nav-link" href="/proxy">Proxy management</a>'
537         self.assertIn(str.encode(testtext), result.data)
538
539     def test_add_proxy(self):
540         voter=''
541         proxy=''
542         response = self.addProxy(user, voter, proxy)
543         self.assertEqual(response.status_code, 400)
544         self.assertIn(str.encode('Error, voter equals proxy.'), response.data)
545
546         voter='User A'
547         response = self.addProxy(user, voter, proxy)
548         self.assertEqual(response.status_code, 400)
549         self.assertIn(str.encode('Error, proxy not found.'), response.data)
550
551         voter='User Z'
552         response = self.addProxy(user, voter, proxy)
553         self.assertEqual(response.status_code, 400)
554         self.assertIn(str.encode('Error, voter not found.'), response.data)
555
556         voter=''
557         proxy='User B'
558         response = self.addProxy(user, voter, proxy)
559         self.assertEqual(response.status_code, 400)
560         self.assertIn(str.encode('Error, voter not found.'), response.data)
561
562         voter='User B'
563         proxy='User B'
564         response = self.addProxy(user, voter, proxy)
565         self.assertEqual(response.status_code, 400)
566         self.assertIn(str.encode('Error, voter equals proxy.'), response.data)
567
568         voter='User A'
569         proxy='User B'
570         response = self.addProxy(user, voter, proxy)
571         self.assertEqual(response.status_code, 302)
572         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
573         testtext= '<form action="/proxy/revoke" method="POST">'
574         self.assertIn(str.encode(testtext), result.data)
575         testtext= '<table>\n      '\
576             + '<thead>\n        '\
577             + '<th>Voter</th>\n        '\
578             + '<th>Proxy</th>\n        <th></th>\n      </thead>\n      '\
579             + '<tr>\n        <td>User A</td>\n        <td>User B</td>\n        '\
580             + '<td><button type="submit" class="btn btn-danger" name="id" value="1">Revoke</button></td>\n      '\
581             + '</tr>\n    </table>\n'
582         self.assertIn(str.encode(testtext), result.data)
583
584         response = self.addProxy(user, voter, proxy)
585         self.assertEqual(response.status_code, 400)
586         self.assertIn(str.encode('Error, proxy allready given.'), response.data)
587
588         voter='User A'
589         proxy='User C'
590         response = self.addProxy(user, voter, proxy)
591         self.assertEqual(response.status_code, 400)
592         self.assertIn(str.encode('Error, proxy allready given.'), response.data)
593
594         voter='User C'
595         proxy='User B'
596         response = self.addProxy(user, voter, proxy)
597         self.assertEqual(response.status_code, 302)
598         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
599         testtext= '<table>\n      '\
600             + '<thead>\n        '\
601             + '<th>Voter</th>\n        '\
602             + '<th>Proxy</th>\n        <th></th>\n      </thead>\n      '\
603             + '<tr>\n        <td>User A</td>\n        <td>User B</td>\n        '\
604             + '<td><button type="submit" class="btn btn-danger" name="id" value="1">Revoke</button></td>\n      </tr>\n      '\
605             + '<tr>\n        <td>User C</td>\n        <td>User B</td>\n        '\
606             + '<td><button type="submit" class="btn btn-danger" name="id" value="2">Revoke</button></td>\n      '\
607             + '</tr>\n    </table>\n'
608         self.assertIn(str.encode(testtext), result.data)
609         testtext= 'proxy granted to:'
610         self.assertNotIn(str.encode(testtext), result.data)
611         testtext= 'holds proxy of:'
612         self.assertNotIn(str.encode(testtext), result.data)
613
614         voter='testuser'
615         proxy='User B'
616         response = self.addProxy(user, voter, proxy)
617         self.assertEqual(response.status_code, 400)
618         self.assertIn(str.encode('Error, Max proxy for \'User B\' reached.'), response.data)
619         
620         voter='testuser'
621         proxy='User A'
622         response = self.addProxy(user, voter, proxy)
623         self.assertEqual(response.status_code, 302)
624         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
625         testtext= '<table>\n      '\
626             + '<thead>\n        '\
627             + '<th>Voter</th>\n        <th>Proxy</th>\n        <th></th>\n      </thead>\n      '\
628             + '<tr>\n        <td>testuser</td>\n        <td>User A</td>\n        '\
629             + '<td><button type="submit" class="btn btn-danger" name="id" value="3">Revoke</button></td>\n      </tr>\n      '\
630             + '<tr>\n        <td>User A</td>\n        <td>User B</td>\n        '\
631             + '<td><button type="submit" class="btn btn-danger" name="id" value="1">Revoke</button></td>\n      </tr>\n      '\
632             + '<tr>\n        <td>User C</td>\n        <td>User B</td>\n        '\
633             + '<td><button type="submit" class="btn btn-danger" name="id" value="2">Revoke</button></td>\n      '\
634             + '</tr>\n    </table>\n'
635         self.assertIn(str.encode(testtext), result.data)
636         testtext= 'proxy granted to: User A\n'
637         self.assertIn(str.encode(testtext), result.data)
638         testtext= 'holds proxy of:'
639         self.assertNotIn(str.encode(testtext), result.data)
640
641         voter='User B'
642         proxy='testuser'
643         response = self.addProxy(user, voter, proxy)
644         self.assertEqual(response.status_code, 302)
645         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
646         testtext= '<table>\n      '\
647             + '<thead>\n        '\
648             + '<th>Voter</th>\n        <th>Proxy</th>\n        <th></th>\n      </thead>\n      '\
649             + '<tr>\n        <td>testuser</td>\n        <td>User A</td>\n        '\
650             + '<td><button type="submit" class="btn btn-danger" name="id" value="3">Revoke</button></td>\n      </tr>\n      '\
651             + '<tr>\n        <td>User A</td>\n        <td>User B</td>\n        '\
652             + '<td><button type="submit" class="btn btn-danger" name="id" value="1">Revoke</button></td>\n      </tr>\n      '\
653             + '<tr>\n        <td>User B</td>\n        <td>testuser</td>\n        '\
654             + '<td><button type="submit" class="btn btn-danger" name="id" value="4">Revoke</button></td>\n      </tr>\n      '\
655             + '<tr>\n        <td>User C</td>\n        <td>User B</td>\n        '\
656             + '<td><button type="submit" class="btn btn-danger" name="id" value="2">Revoke</button></td>\n      '\
657             + '</tr>\n    </table>\n'
658         self.assertIn(str.encode(testtext), result.data)
659         testtext= 'proxy granted to: User A\n'
660         self.assertIn(str.encode(testtext), result.data)
661         testtext= 'holds proxy of: User B\n'
662         self.assertIn(str.encode(testtext), result.data)
663
664         response = self.revokeProxy(user, userid)
665         self.assertEqual(response.status_code, 302)
666         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
667         testtext= '<table>\n      '\
668             + '<thead>\n        '\
669             + '<th>Voter</th>\n        <th>Proxy</th>\n        <th></th>\n      </thead>\n      '\
670             + '<tr>\n        <td>testuser</td>\n        <td>User A</td>\n        '\
671             + '<td><button type="submit" class="btn btn-danger" name="id" value="3">Revoke</button></td>\n      </tr>\n      '\
672             + '<tr>\n        <td>User A</td>\n        <td>User B</td>\n        '\
673             + '<td><button type="submit" class="btn btn-danger" name="id" value="1">Revoke</button></td>\n      </tr>\n      '\
674             + '<tr>\n        <td>User C</td>\n        <td>User B</td>\n        '\
675             + '<td><button type="submit" class="btn btn-danger" name="id" value="2">Revoke</button></td>\n      '\
676             + '</tr>\n    </table>\n'
677         self.assertIn(str.encode(testtext), result.data)
678         testtext= 'proxy granted to: User A\n'
679         self.assertIn(str.encode(testtext), result.data)
680         testtext= 'holds proxy of:'
681         self.assertNotIn(str.encode(testtext), result.data)
682
683         response = self.revokeProxy(user, 3)
684         self.assertEqual(response.status_code, 302)
685         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
686         testtext= '<table>\n      '\
687             + '<thead>\n        '\
688             + '<th>Voter</th>\n        <th>Proxy</th>\n        <th></th>\n      </thead>\n      '\
689             + '<tr>\n        <td>User A</td>\n        <td>User B</td>\n        '\
690             + '<td><button type="submit" class="btn btn-danger" name="id" value="1">Revoke</button></td>\n      </tr>\n      '\
691             + '<tr>\n        <td>User C</td>\n        <td>User B</td>\n        '\
692             + '<td><button type="submit" class="btn btn-danger" name="id" value="2">Revoke</button></td>\n      '\
693             + '</tr>\n    </table>\n'
694         self.assertIn(str.encode(testtext), result.data)
695         testtext= 'proxy granted to:'
696         self.assertNotIn(str.encode(testtext), result.data)
697         testtext= 'holds proxy of:'
698         self.assertNotIn(str.encode(testtext), result.data)
699
700         result = self.app.post('proxy/revokeall', environ_base={'USER_ROLES': user}, follow_redirects=True)
701         self.assertEqual(response.status_code, 302)
702         result = self.app.get('proxy', environ_base={'USER_ROLES': user}, follow_redirects=True)
703         testtext= '<table>\n      '\
704             + '<thead>\n        '\
705             + '<th>Voter</th>\n        <th>Proxy</th>\n        <th></th>\n      </thead>\n    '\
706             + '</table>\n'
707         self.assertIn(str.encode(testtext), result.data)
708
709 class ProxyVoteTests(BasicTest):
710
711     def setUp(self):
712         self.init_test()
713         global user
714         user='testuser/vote:* proxyadmin:*'
715         self.db_sampledata()
716
717     def tearDown(self):
718         pass
719
720     def test_proxy_vote(self):
721         voter='testuser'
722         proxy='User B'
723         proxyid=2
724         proxyuser='User B/vote:*'
725
726         response = self.addProxy(user, proxy, voter)
727         self.assertEqual(response.status_code, 302)
728
729         motion='g1.20200402.004'
730         response = self.createVote(user, motion, 'yes', proxyid)
731         self.assertEqual(response.status_code, 302)
732
733         # testuser view
734         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
735         # own vote without change
736         testtext= '<form action="/motion/g1.20200402.004/vote/4" method="POST">\n'\
737             + '<button type="submit" class="btn btn-primary" name="vote" value="yes" id="vote-yes">Yes</button>\n'\
738             + '<button type="submit" class="btn btn-primary" name="vote" value="no" id="vote-no">No</button>\n'\
739             + '<button type="submit" class="btn btn-primary" name="vote" value="abstain" id="vote-abstain">Abstain</button>\n</form>'
740         self.assertIn(str.encode(testtext), result.data)
741         # proxy vote with change
742         testtext= '<form action="/motion/g1.20200402.004/vote/2" method="POST">\n'\
743             + '<button type="submit" class="btn btn-success" name="vote" value="yes" id="vote-yes">Yes</button>\n'\
744             + '<button type="submit" class="btn btn-primary" name="vote" value="no" id="vote-no">No</button>\n'\
745             + '<button type="submit" class="btn btn-primary" name="vote" value="abstain" id="vote-abstain">Abstain</button>\n</form>\n'
746         self.assertIn(str.encode(testtext), result.data)
747         
748         # User B view
749         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': proxyuser}, follow_redirects=True)
750         # own vote without change
751         testtext= '<h3>My vote</h3>\nGiven by testuser\n'\
752             + '<form action="/motion/g1.20200402.004/vote/2" method="POST">\n'\
753             + '<button type="submit" class="btn btn-success" name="vote" value="yes" id="vote-yes">Yes</button>\n'\
754             + '<button type="submit" class="btn btn-primary" name="vote" value="no" id="vote-no">No</button>\n'\
755             + '<button type="submit" class="btn btn-primary" name="vote" value="abstain" id="vote-abstain">Abstain</button>\n</form>'
756         self.assertIn(str.encode(testtext), result.data)
757         
758         # change vote
759         response = self.createVote(user, motion, 'no', proxyid)
760         self.assertEqual(response.status_code, 302)
761
762         result = self.app.get('/motion/' + motion, environ_base={'USER_ROLES': user}, follow_redirects=True)
763         testtext= '<form action="/motion/g1.20200402.004/vote/2" method="POST">\n'\
764             + '<button type="submit" class="btn btn-primary" name="vote" value="yes" id="vote-yes">Yes</button>\n'\
765             + '<button type="submit" class="btn btn-success" name="vote" value="no" id="vote-no">No</button>\n'\
766             + '<button type="submit" class="btn btn-primary" name="vote" value="abstain" id="vote-abstain">Abstain</button>\n</form>\n'
767         self.assertIn(str.encode(testtext), result.data)
768
769     def test_proxy_vote_no_proxy(self):
770         voter='testuser'
771         proxy='User B'
772         # wrong proxy id
773         proxyid=3
774
775         response = self.addProxy(user, proxy, voter)
776         self.assertEqual(response.status_code, 302)
777
778         motion='g1.20200402.004'
779         response = self.createVote(user, motion, 'yes', proxyid)
780         self.assertEqual(response.status_code, 400)
781         self.assertIn(str.encode('Error, proxy not found'), response.data)
782         
783         # non existing id
784         proxyid=10000
785
786         motion='g1.20200402.004'
787         response = self.createVote(user, motion, 'yes', proxyid)
788         self.assertEqual(response.status_code, 400)
789         self.assertIn(str.encode('Error, proxy not found'), response.data)
790
791     def test_proxy_vote_no_voter(self):
792         voter='User A'
793         proxy='User B'
794         proxyid=2
795
796         response = self.addProxy(user, proxy, voter)
797         self.assertEqual(response.status_code, 302)
798
799         user1='testuser1/'
800         motion='g1.20200402.004'
801         response = self.createVote(user1, motion, 'yes', proxyid)
802         self.assertEqual(response.status_code, 403)
803         self.assertIn(str.encode('Forbidden'), response.data)
804
805
806
807 if __name__ == "__main__":
808     unittest.main()