/shabti/templates/microsite/+package+/tests/functional/test_useradmin_unauth.py_tmpl

https://bitbucket.org/gawel/shabti · Unknown · 55 lines · 33 code · 22 blank · 0 comment · 0 complexity · a09eb3cd52c763b5befe4fb332bcca80 MD5 · raw file 

    

  1. # microsite/tests/functional/test_useradmin_unauth
    2. 

  2. from pylons import url
    3. 

  3. from {{package}}.model import *
    4. 

  4. from {{package}}.tests import *
    5. 

  5. 

  6. class TestUserUnauthAdminController(TestController):
    7. 

  7.     def test_unauthorised_user_state_retrieval_prohibited(self):
    8. 

  8.         """UserUnauthAdmin (microsite): unauthorised user GET access is prohibited."""
    9. 

  9.         response = self.app.get(url('edit_user', id='1'))
    10. 

  10.         
    11. 

  11.         assert response.status_int == 302
    12. 

  12.         
    13. 

  13.         assert response.location == 'http://localhost/login/index'
    14. 

  14.         
    15. 

  15.         response = self.app.get(url('new_user'))
    16. 

  16.         
    17. 

  17.         assert response.status_int == 302
    18. 

  18.         
    19. 

  19.         assert response.location == 'http://localhost/login/index'
    20. 

  20.         
    21. 

  21.         response = self.app.get(url('save_user', id='1'),
    22. 

  22.                                 params={'email': 'newemail@example.com',
    23. 

  23.                                         '_method':u'PUT'})
    24. 

  24.         
    25. 

  25.         assert response.status_int == 302
    26. 

  26.         
    27. 

  27.         assert response.location == 'http://localhost/login/index'
    28. 

  28.         
    29. 

  29.         response = self.app.get(url('delete_user', id='1'),
    30. 

  30.                                 params={'_method':'DELETE'})
    31. 

  31.         
    32. 

  32.         assert response.status_int == 302
    33. 

  33.         
    34. 

  34.         assert response.location == 'http://localhost/login/index'
    35. 

  35.     
    36. 

  36.     
    37. 

  37.     def test_unauthorised_user_state_change_prohibited(self):
    38. 

  38.         """UserUnauthAdmin (microsite): unauthorised user PUTs and DELETEs are prohibited"""
    39. 

  39.         response = self.app.put(url('edit_user', id='1'),
    40. 

  40.                                 params={'email': 'new@example.com',
    41. 

  41.                                         '_method':'PUT'})
    42. 

  42.         
    43. 

  43.         assert response.status_int == 302
    44. 

  44.         
    45. 

  45.         assert response.location == 'http://localhost/login/index'
    46. 

  46.         
    47. 

  47.         response = self.app.delete(url('delete_user', id='1'))
    48. 

  48.         
    49. 

  49.         assert response.status_int == 302
    50. 

  50.         
    51. 

  51.         assert response.location == 'http://localhost/login/index'
    52. 

  52.     
    53. 

  53. 

  54. # --- Added by Shabti microsite template
    55.