mirror of
https://github.com/haiwen/seahub.git
synced 2025-07-12 14:38:58 +00:00
3cd878bd6a
Squashed commit of the following:
commit 12f52311df704e48c282b2a47f59f7a283cfa5c5
Author: zhengxie <xiez1989@gmail.com>
Date: Tue Sep 11 15:14:34 2018 +0800
[API] Update client sync and list dir items apis
commit bc18d19dc0f648732c5933c6918d8e784fc0f910
Author: llj <lingjun.li1@gmail.com>
Date: Tue Sep 4 12:22:10 2018 +0800
Add preview related share perms
Squashed commit of the following:
commit 658bdbdc7acf262f2c0abb0387cf3142b2d8ee37
Author: llj <lingjun.li1@gmail.com>
Date: Tue Sep 4 12:17:47 2018 +0800
[library icon title] added title for 'admin' permission
commit 51a088fd7987e2307e5666facb6627d42a7843ec
Author: zhengxie <xiez1989@gmail.com>
Date: Sat Sep 1 15:33:09 2018 +0800
Add preview related share perms
Squashed commit of the following:
commit 42fe21ef0ba3bad4fb68dc5283194cb34eb7775a
Author: llj <lingjun.li1@gmail.com>
Date: Sat Sep 1 13:33:59 2018 +0800
[icon tip] modified library/folder icon title
commit 077fecdce80bce966296a1735896a24bf32c282f
Author: zhengxie <xiez1989@gmail.com>
Date: Mon Aug 27 11:05:34 2018 +0800
Add preview related share perms
Squashed commit of the following:
commit 5783325eb25d7298ea3db7f59595446d122889e5
Author: llj <lingjun.li1@gmail.com>
Date: Fri Aug 24 21:14:59 2018 +0800
fixup
commit 5f4f4025221f4026a4e7a9bc1c7bba5d6decf5a9
Author: zhengxie <xiez1989@gmail.com>
Date: Fri Aug 24 20:55:41 2018 +0800
Fix wopi perm
commit 632744cd5e56f8812af0efe523cf5751bbf57b66
Author: zhengxie <xiez1989@gmail.com>
Date: Fri Aug 24 17:29:31 2018 +0800
Add preview related share perms
Squashed commit of the following:
commit 683296449601960d76a2d0245dab694ab16f67b2
Author: llj <lingjun.li1@gmail.com>
Date: Fri Aug 24 15:54:59 2018 +0800
modification after adding 2 new permissions
commit 3eff1ec06fc7566942b736261a1d5b613d706117
Author: llj <lingjun.li1@gmail.com>
Date: Thu Aug 23 14:58:33 2018 +0800
[permission] added 2 new permissions for 'share' & 'folder permission'
commit 73a0bfc6560860ac11e96a675fe789a984a194c8
Author: zhengxie <xiez1989@gmail.com>
Date: Fri Aug 24 16:34:47 2018 +0800
Add prevew related perms in history file view and text_diff
commit 533b3ff0ca4aa5564ecc87456772b70eedfa816f
Author: zhengxie <xiez1989@gmail.com>
Date: Fri Aug 24 13:49:28 2018 +0800
Add prevew related perms on file views
commit 03db78a841baddf6c042988358d20417f06be4ae
Author: zhengxie <xiez1989@gmail.com>
Date: Thu Aug 23 10:56:17 2018 +0800
[api2] Update repo perms and add is pro version check
commit c025319fe56658da3a3dc077743ee016ac5acd4d
Author: ilearnit <helloworld.c@outlook.com>
Date: Wed Aug 22 11:09:27 2018 +0800
update perm copy/download/share
commit ea19ab4c695c99c0c2817616f2177bebae0777a2
Author: zhengxie <xiez1989@gmail.com>
Date: Mon Aug 20 16:00:11 2018 +0800
wip: add repo preview related perms.
Updated APIs:
1. [api2] group libraries
2. [api2] dir shared items
3. [api2] share link zip tasks
Updated Views:
1. wiki & wopi
2. ajax copy/download files/dirs
247 lines
7.9 KiB
Python
247 lines
7.9 KiB
Python
import json
|
|
|
|
from django.core.urlresolvers import reverse
|
|
|
|
from seaserv import seafile_api, ccnet_api
|
|
|
|
from tests.common.utils import randstring
|
|
|
|
from seahub.test_utils import BaseTestCase
|
|
from seahub.share.models import ExtraGroupsSharePermission
|
|
from seahub.constants import (
|
|
PERMISSION_ADMIN, PERMISSION_PREVIEW, PERMISSION_PREVIEW_EDIT)
|
|
|
|
|
|
class GroupLibrariesTest(BaseTestCase):
|
|
|
|
def setUp(self):
|
|
self.repo_id = self.repo.id
|
|
self.repo_name = self.repo.name
|
|
self.group_id = self.group.id
|
|
self.user_name = self.user.username
|
|
self.admin_name = self.admin.username
|
|
self.group_libraries_url = reverse('api-v2.1-group-libraries', args=[self.group.id])
|
|
|
|
def tearDown(self):
|
|
self.remove_group()
|
|
self.remove_repo()
|
|
|
|
def test_can_get(self):
|
|
|
|
# share repo to group
|
|
seafile_api.set_group_repo(self.repo_id,
|
|
self.group_id, self.user_name, 'rw')
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 1
|
|
|
|
self.login_as(self.user)
|
|
|
|
resp = self.client.get(self.group_libraries_url)
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
json_resp = json.loads(resp.content)
|
|
assert json_resp[0]['repo_name'] == self.repo_name
|
|
assert json_resp[0]['repo_id'] == self.repo_id
|
|
|
|
def test_get_with_login_user_is_not_group_member(self):
|
|
|
|
self.login_as(self.admin)
|
|
|
|
resp = self.client.get(self.group_libraries_url)
|
|
self.assertEqual(403, resp.status_code)
|
|
|
|
def test_get_with_login_user_is_group_member(self):
|
|
|
|
ccnet_api.group_add_member(self.group_id, self.user_name, self.admin_name)
|
|
|
|
self.login_as(self.admin)
|
|
|
|
resp = self.client.get(self.group_libraries_url)
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
def test_can_create(self):
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 0
|
|
|
|
self.login_as(self.user)
|
|
|
|
repo_name = randstring(6)
|
|
resp = self.client.post(self.group_libraries_url, {
|
|
'repo_name': repo_name
|
|
})
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
json_resp = json.loads(resp.content)
|
|
assert json_resp['repo_name'] == repo_name
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 1
|
|
|
|
def test_can_create_with_perms(self):
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 0
|
|
|
|
self.login_as(self.user)
|
|
|
|
for perm in [PERMISSION_PREVIEW, PERMISSION_PREVIEW_EDIT]:
|
|
repo_name = randstring(6)
|
|
resp = self.client.post(self.group_libraries_url, {
|
|
'repo_name': repo_name,
|
|
'permission': perm
|
|
})
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
json_resp = json.loads(resp.content)
|
|
assert json_resp['repo_name'] == repo_name
|
|
assert json_resp['permission'] == perm
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 2
|
|
|
|
def test_create_with_login_user_is_not_group_member(self):
|
|
|
|
self.login_as(self.admin)
|
|
|
|
repo_name = randstring(6)
|
|
resp = self.client.post(self.group_libraries_url, {
|
|
'repo_name': repo_name
|
|
})
|
|
self.assertEqual(403, resp.status_code)
|
|
|
|
def test_create_with_login_user_is_group_member(self):
|
|
|
|
ccnet_api.group_add_member(self.group_id, self.user_name, self.admin_name)
|
|
|
|
self.login_as(self.admin)
|
|
|
|
repo_name = randstring(6)
|
|
resp = self.client.post(self.group_libraries_url, {
|
|
'repo_name': repo_name
|
|
})
|
|
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
json_resp = json.loads(resp.content)
|
|
assert json_resp['repo_name'] == repo_name
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 1
|
|
|
|
|
|
class GroupLibraryTest(BaseTestCase):
|
|
|
|
def setUp(self):
|
|
self.repo_id = self.repo.id
|
|
self.repo_name = self.repo.name
|
|
self.group_id = self.group.id
|
|
self.user_name = self.user.username
|
|
self.admin_name = self.admin.username
|
|
self.group_library_url = reverse('api-v2.1-group-library',
|
|
args=[self.group_id, self.repo_id])
|
|
|
|
seafile_api.set_group_repo(self.repo_id,
|
|
self.group_id, self.user_name, 'rw')
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 1
|
|
|
|
def tearDown(self):
|
|
self.remove_group()
|
|
self.remove_repo()
|
|
|
|
def test_can_delete(self):
|
|
|
|
self.login_as(self.user)
|
|
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 0
|
|
|
|
def test_delete_with_login_user_is_not_group_member(self):
|
|
|
|
self.login_as(self.admin)
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(403, resp.status_code)
|
|
|
|
def test_delete_with_login_user_is_group_member(self):
|
|
|
|
ccnet_api.group_add_member(self.group_id, self.user_name, self.admin_name)
|
|
|
|
self.login_as(self.admin)
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(403, resp.status_code)
|
|
|
|
def test_delete_if_login_user_is_repo_owner(self):
|
|
|
|
self.login_as(self.admin)
|
|
|
|
# admin user can not delete
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(403, resp.status_code)
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 1
|
|
|
|
# add admin user to group
|
|
ccnet_api.group_add_member(self.group_id, self.user_name, self.admin_name)
|
|
|
|
# transfer repo to admin user
|
|
library_url = reverse('api-v2.1-admin-library', args=[self.repo_id])
|
|
data = 'owner=%s' % self.admin_name
|
|
resp = self.client.put(library_url, data, 'application/x-www-form-urlencoded')
|
|
|
|
# admin user can delete
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 0
|
|
|
|
def test_delete_if_login_user_is_group_staff(self):
|
|
|
|
self.login_as(self.admin)
|
|
|
|
# admin user can not delete
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(403, resp.status_code)
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 1
|
|
|
|
# set admin user as group staff
|
|
ccnet_api.group_add_member(self.group_id, self.user_name, self.admin_name)
|
|
ccnet_api.group_set_admin(self.group_id, self.admin_name)
|
|
|
|
# admin user can delete
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 0
|
|
|
|
def test_delete_if_login_user_is_group_repo_admin(self):
|
|
|
|
self.login_as(self.admin)
|
|
|
|
# admin user can not delete
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(403, resp.status_code)
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 1
|
|
|
|
# share library to group with `admin` permission
|
|
ccnet_api.group_add_member(self.group_id, self.user_name, self.admin_name)
|
|
ExtraGroupsSharePermission.objects.create_share_permission(
|
|
self.repo_id, self.group_id, PERMISSION_ADMIN)
|
|
|
|
# admin user can delete
|
|
resp = self.client.delete(self.group_library_url)
|
|
self.assertEqual(200, resp.status_code)
|
|
|
|
group_repos = seafile_api.get_repos_by_group(self.group_id)
|
|
assert len(group_repos) == 0
|