OpenGroupMemberCreationTests

Complexity

Total Complexity

4

Size/Duplication

Total Lines	42
Duplicated Lines	0 %

4 Methods

Rating	Name	Duplication	Size	Complexity
A	test_create_not_for_self()	0	5	1
A	setUpTestData()	0	23	1
A	test_create_not_authed()	0	4	1
A	test_create_success()	0	6	1

import json

from django.core import mail

from rest_framework import status
from rest_framework.test import APITestCase

from sigma_core.models.user import User
from sigma_core.models.group import Group
from sigma_core.models.group_member import GroupMember
from sigma_core.serializers.user import DetailedUserSerializer as UserSerializer
from sigma_core.tests.factories import UserFactory, AdminUserFactory, GroupFactory, GroupMemberFactory


class OpenGroupMemberCreationTests(APITestCase):
    @classmethod
    def setUpTestData(self):
        super(APITestCase, self).setUpTestData()

        # Routes
        self.members_url = "/group-member/"
        self.member_url = self.members_url + "%d/"

        # Group open to anyone
        self.group = GroupFactory()
        self.group.default_member_rank = 1
        self.group.save()

        # Users already in group
        self.users = [UserFactory()]
        # Associated GroupMember
        self.group_member1 = GroupMember(user=self.users[0], group=self.group, perm_rank=Group.ADMINISTRATOR_RANK)

        # Testing user
        self.user = UserFactory()

        # Misc
        self.new_membership_data = {"group": self.group.id, "user": self.user.id}

    def test_create_not_authed(self):
        self.client.force_authenticate(user=None)
        response = self.client.post(self.members_url, self.new_membership_data)
        self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)

    def test_create_not_for_self(self):
        # Attempt to add somebody else to a group
        self.client.force_authenticate(user=self.users[0])
        response = self.client.post(self.members_url, self.new_membership_data)
        self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)

    def test_create_success(self):
        # Succesful attempt to join an open group
        self.client.force_authenticate(user=self.user)
        response = self.client.post(self.members_url, self.new_membership_data)
        self.assertEqual(response.status_code, status.HTTP_201_CREATED)
        self.assertEqual(response.data['perm_rank'], self.group.default_member_rank)


class RequestGroupMemberCreationTests(APITestCase):
    @classmethod
    def setUpTestData(self):
        super(APITestCase, self).setUpTestData()

        # Routes
        self.members_url = "/group-member/"
        self.member_url = self.members_url + "%d/"

        # Group with membership request
        self.group = GroupFactory()
        self.group.default_member_rank = 0
        self.group.req_rank_accept_join_requests = 5
        self.group.save()

        # Users already in group
        self.users = UserFactory.create_batch(3)
        # Associated GroupMember
        self.group_member1 = GroupMember(user=self.users[0], group=self.group, perm_rank=Group.ADMINISTRATOR_RANK) # can validate requests
        self.group_member2 = GroupMember(user=self.users[1], group=self.group, perm_rank=1) # cannot validate requests
        self.group_member3 = GroupMember(user=self.users[2], group=self.group, perm_rank=0) # request to be validated

        # Testing user
        self.user = UserFactory()

        # Misc
        self.new_membership_data = {"group": self.group.id, "user": self.user.id}

        def test_create_not_authed(self):
            self.client.force_authenticate(user=None)
            response = self.client.post(self.members_url, self.new_membership_data)
            self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)

        def test_create_success(self):
            # Succesful attempt to request group membership
            self.client.force_authenticate(user=self.user)
            response = self.client.post(self.members_url, self.new_membership_data)
            self.assertEqual(response.status_code, status.HTTP_201_CREATED)
            self.assertEqual(response.data['perm_rank'], self.group.default_member_rank)

        def test_validate_forbidden(self):
            # Attempt to validate a request but not enough permission
            self.client.force_authenticate(user=self.users[1])
            response = self.client.put(self.member_url + "accept_join_request/" % self.group_member3.id, {})
            self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)
            self.assertEqual(response.data['perm_rank'], 0)

        def test_validate_success(self):
            # Succesful attempt to validate a request
            self.client.force_authenticate(user=self.users[0])
            response = self.client.put(self.member_url + "accept_join_request/" % self.group_member3.id, {})
            self.assertEqual(response.status_code, status.HTTP_200_OK)
            self.assertEqual(response.data['perm_rank'], 1)


class InvitationGroupMemberCreationTests(APITestCase):
    @classmethod
    def setUpTestData(self):
        super(APITestCase, self).setUpTestData()

        # Routes
        self.members_url = "/group-member/"
        self.member_url = self.members_url + "%d/"

        # Group with invitation only
        self.group = GroupFactory()
        self.group.req_rank_invite = 5
        self.group.save()

        # Testing user
        self.user = UserFactory()

        # Misc
        self.new_membership_data = {"user": self.user.id, "group": self.group.id}

        def test_create_not_authed(self):
            self.client.force_authenticate(user=None)
            response = self.client.post(self.members_url, self.new_membership_data)
            self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)

        def test_create_forbidden(self):
            # Attempt to get group membership
            self.client.force_authenticate(user=self.user)
            response = self.client.post(self.members_url, self.new_membership_data)
            self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN)