mirror of
https://github.com/haiwen/seahub.git
synced 2025-09-02 07:27:04 +00:00
new share admin page (#1233)
This commit is contained in:
@@ -7,6 +7,11 @@ from seahub.test_utils import BaseTestCase
|
||||
from seahub.share.models import FileShare
|
||||
from seahub.api2.endpoints.share_links import ShareLinks, ShareLink
|
||||
|
||||
try:
|
||||
from seahub.settings import LOCAL_PRO_DEV_ENV
|
||||
except ImportError:
|
||||
LOCAL_PRO_DEV_ENV = False
|
||||
|
||||
class ShareLinksTest(BaseTestCase):
|
||||
|
||||
def setUp(self):
|
||||
@@ -34,7 +39,6 @@ class ShareLinksTest(BaseTestCase):
|
||||
link = FileShare.objects.get(token=token)
|
||||
link.delete()
|
||||
|
||||
# test file share link
|
||||
def test_get_file_share_link(self):
|
||||
self.login_as(self.user)
|
||||
token = self._add_file_share_link()
|
||||
@@ -55,34 +59,6 @@ class ShareLinksTest(BaseTestCase):
|
||||
|
||||
self._remove_share_link(token)
|
||||
|
||||
def test_create_file_share_link(self):
|
||||
self.login_as(self.user)
|
||||
|
||||
resp = self.client.post(self.url, {'path': self.file_path, 'repo_id': self.repo_id})
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
json_resp = json.loads(resp.content)
|
||||
assert json_resp['link'] is not None
|
||||
assert json_resp['token'] is not None
|
||||
assert json_resp['is_expired'] is not None
|
||||
|
||||
assert json_resp['token'] in json_resp['link']
|
||||
assert 'f' in json_resp['link']
|
||||
|
||||
self._remove_share_link(json_resp['token'])
|
||||
|
||||
def test_delete_file_share_link(self):
|
||||
self.login_as(self.user)
|
||||
token = self._add_file_share_link()
|
||||
|
||||
url = reverse('api-v2.1-share-link', args=[token])
|
||||
resp = self.client.delete(url, {}, 'application/x-www-form-urlencoded')
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
json_resp = json.loads(resp.content)
|
||||
assert json_resp['success'] is True
|
||||
|
||||
# test dir share link
|
||||
def test_get_dir_share_link(self):
|
||||
self.login_as(self.user)
|
||||
token = self._add_dir_share_link()
|
||||
@@ -103,6 +79,30 @@ class ShareLinksTest(BaseTestCase):
|
||||
|
||||
self._remove_share_link(token)
|
||||
|
||||
@patch.object(ShareLinks, '_can_generate_shared_link')
|
||||
def test_get_link_with_invalid_user_role_permission(self, mock_can_generate_shared_link):
|
||||
self.login_as(self.user)
|
||||
mock_can_generate_shared_link.return_value = False
|
||||
|
||||
resp = self.client.get(self.url)
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
def test_create_file_share_link(self):
|
||||
self.login_as(self.user)
|
||||
|
||||
resp = self.client.post(self.url, {'path': self.file_path, 'repo_id': self.repo_id})
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
json_resp = json.loads(resp.content)
|
||||
assert json_resp['link'] is not None
|
||||
assert json_resp['token'] is not None
|
||||
assert json_resp['is_expired'] is not None
|
||||
|
||||
assert json_resp['token'] in json_resp['link']
|
||||
assert 'f' in json_resp['link']
|
||||
|
||||
self._remove_share_link(json_resp['token'])
|
||||
|
||||
def test_create_dir_share_link(self):
|
||||
self.login_as(self.user)
|
||||
|
||||
@@ -119,6 +119,80 @@ class ShareLinksTest(BaseTestCase):
|
||||
|
||||
self._remove_share_link(json_resp['token'])
|
||||
|
||||
def test_create_link_with_invalid_repo_permission(self):
|
||||
# login with admin to create share link in user repo
|
||||
self.login_as(self.admin)
|
||||
data = {'path': self.file_path, 'repo_id': self.repo_id}
|
||||
resp = self.client.post(self.url, data)
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
def test_create_link_with_rw_permission_folder(self):
|
||||
|
||||
if not LOCAL_PRO_DEV_ENV:
|
||||
return
|
||||
|
||||
self.set_user_folder_rw_permission_to_admin()
|
||||
|
||||
# login with admin to create share link for 'r' permission folder
|
||||
self.login_as(self.admin)
|
||||
data = {'path': self.file_path, 'repo_id': self.repo_id}
|
||||
resp = self.client.post(self.url, data)
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
def test_create_link_with_rw_permission_folder_in_group(self):
|
||||
|
||||
self.share_repo_to_group_with_rw_permission()
|
||||
self.add_admin_to_group()
|
||||
|
||||
# login with admin to create share link for 'r' permission folder
|
||||
self.login_as(self.admin)
|
||||
data = {'path': self.file_path, 'repo_id': self.repo_id}
|
||||
resp = self.client.post(self.url, data)
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
def test_create_link_with_r_permission_folder(self):
|
||||
|
||||
if not LOCAL_PRO_DEV_ENV:
|
||||
return
|
||||
|
||||
self.set_user_folder_r_permission_to_admin()
|
||||
|
||||
# login with admin to create share link for 'r' permission folder
|
||||
self.login_as(self.admin)
|
||||
data = {'path': self.file_path, 'repo_id': self.repo_id}
|
||||
resp = self.client.post(self.url, data)
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
def test_create_link_with_r_permission_folder_in_group(self):
|
||||
|
||||
self.share_repo_to_group_with_r_permission()
|
||||
self.add_admin_to_group()
|
||||
|
||||
# login with admin to create share link for 'r' permission folder
|
||||
self.login_as(self.admin)
|
||||
data = {'path': self.file_path, 'repo_id': self.repo_id}
|
||||
resp = self.client.post(self.url, data)
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
@patch.object(ShareLinks, '_can_generate_shared_link')
|
||||
def test_create_link_with_invalid_urer_role_permission(self, mock_can_generate_shared_link):
|
||||
self.login_as(self.user)
|
||||
mock_can_generate_shared_link.return_value = False
|
||||
|
||||
resp = self.client.post(self.url, {'path': self.folder_path, 'repo_id': self.repo_id})
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
def test_delete_file_share_link(self):
|
||||
self.login_as(self.user)
|
||||
token = self._add_file_share_link()
|
||||
|
||||
url = reverse('api-v2.1-share-link', args=[token])
|
||||
resp = self.client.delete(url, {}, 'application/x-www-form-urlencoded')
|
||||
self.assertEqual(200, resp.status_code)
|
||||
|
||||
json_resp = json.loads(resp.content)
|
||||
assert json_resp['success'] is True
|
||||
|
||||
def test_delete_dir_share_link(self):
|
||||
self.login_as(self.user)
|
||||
token = self._add_file_share_link()
|
||||
@@ -129,42 +203,20 @@ class ShareLinksTest(BaseTestCase):
|
||||
json_resp = json.loads(resp.content)
|
||||
assert json_resp['success'] is True
|
||||
|
||||
# test permission
|
||||
def test_can_not_delete_link_if_not_owner(self):
|
||||
def test_delete_link_if_not_owner(self):
|
||||
self.login_as(self.admin)
|
||||
token = self._add_file_share_link()
|
||||
url = reverse('api-v2.1-share-link', args=[token])
|
||||
resp = self.client.delete(url, {}, 'application/x-www-form-urlencoded')
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
@patch.object(ShareLinks, '_can_generate_shared_link')
|
||||
def test_can_not_get_and_create_link_with_invalid_permission(self, mock_can_generate_shared_link):
|
||||
self.login_as(self.user)
|
||||
mock_can_generate_shared_link.return_value = False
|
||||
|
||||
resp = self.client.get(self.url)
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
resp = self.client.post(self.url)
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
self.logout()
|
||||
|
||||
# login with another user to test repo permission
|
||||
self.login_as(self.admin)
|
||||
mock_can_generate_shared_link.return_value = True
|
||||
|
||||
args = '?repo_id=%s' % self.repo_id
|
||||
resp = self.client.get(self.url + args)
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
data = {'path': self.file_path, 'repo_id': self.repo_id}
|
||||
resp = self.client.post(self.url, data)
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
||||
@patch.object(ShareLink, '_can_generate_shared_link')
|
||||
def test_can_not_delete_link_with_invalid_permission(self, mock_can_generate_shared_link):
|
||||
def test_delete_link_with_invalid_user_repo_permission(self, mock_can_generate_shared_link):
|
||||
token = self._add_file_share_link()
|
||||
|
||||
self.login_as(self.user)
|
||||
mock_can_generate_shared_link.return_value = False
|
||||
|
||||
url = reverse('api-v2.1-share-link', args=[token])
|
||||
resp = self.client.delete(url, {}, 'application/x-www-form-urlencoded')
|
||||
self.assertEqual(403, resp.status_code)
|
||||
|
Reference in New Issue
Block a user