194 lines
8.8 KiB
Python
194 lines
8.8 KiB
Python
"""
|
|
Test instructor.access
|
|
"""
|
|
|
|
from nose.tools import raises
|
|
from django.contrib.auth.models import Group
|
|
from student.tests.factories import UserFactory
|
|
from xmodule.modulestore.tests.factories import CourseFactory
|
|
from xmodule.modulestore.tests.django_utils import ModuleStoreTestCase
|
|
|
|
from django.test.utils import override_settings
|
|
from courseware.tests.modulestore_config import TEST_DATA_MONGO_MODULESTORE
|
|
|
|
from courseware.access import get_access_group_name
|
|
from django_comment_common.models import (Role,
|
|
# FORUM_ROLE_ADMINISTRATOR,
|
|
FORUM_ROLE_MODERATOR,
|
|
FORUM_ROLE_COMMUNITY_TA)
|
|
from instructor.access import allow_access, revoke_access, list_with_level, update_forum_role_membership
|
|
|
|
|
|
@override_settings(MODULESTORE=TEST_DATA_MONGO_MODULESTORE)
|
|
class TestInstructorAccessControlDB(ModuleStoreTestCase):
|
|
""" Test instructor access administration against database effects """
|
|
|
|
def setUp(self):
|
|
self.course = CourseFactory.create()
|
|
|
|
def test_allow(self):
|
|
user = UserFactory()
|
|
level = 'staff'
|
|
|
|
allow_access(self.course, user, level)
|
|
|
|
self.assertIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
|
|
def test_allow_twice(self):
|
|
user = UserFactory()
|
|
level = 'staff'
|
|
|
|
allow_access(self.course, user, level)
|
|
self.assertIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
allow_access(self.course, user, level)
|
|
self.assertIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
|
|
def test_allow_revoke(self):
|
|
user = UserFactory()
|
|
level = 'staff'
|
|
|
|
allow_access(self.course, user, level)
|
|
self.assertIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
revoke_access(self.course, user, level)
|
|
self.assertNotIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
allow_access(self.course, user, level)
|
|
self.assertIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
revoke_access(self.course, user, level)
|
|
self.assertNotIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
|
|
def test_revoke_without_group(self):
|
|
user = UserFactory()
|
|
level = 'staff'
|
|
|
|
revoke_access(self.course, user, level)
|
|
self.assertNotIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
|
|
def test_revoke_with_group(self):
|
|
user = UserFactory()
|
|
level = 'staff'
|
|
|
|
Group(name=get_access_group_name(self.course, level))
|
|
revoke_access(self.course, user, level)
|
|
self.assertNotIn(user, Group.objects.get(name=get_access_group_name(self.course, 'staff')).user_set.all())
|
|
|
|
def test_allow_disallow_multiuser(self):
|
|
users = [UserFactory() for _ in xrange(3)]
|
|
levels = ['staff', 'instructor', 'staff']
|
|
antilevels = ['instructor', 'staff', 'instructor']
|
|
|
|
allow_access(self.course, users[0], levels[0])
|
|
allow_access(self.course, users[1], levels[1])
|
|
allow_access(self.course, users[2], levels[2])
|
|
self.assertIn(users[0], Group.objects.get(name=get_access_group_name(self.course, levels[0])).user_set.all())
|
|
self.assertIn(users[1], Group.objects.get(name=get_access_group_name(self.course, levels[1])).user_set.all())
|
|
self.assertIn(users[2], Group.objects.get(name=get_access_group_name(self.course, levels[2])).user_set.all())
|
|
|
|
revoke_access(self.course, users[0], levels[0])
|
|
revoke_access(self.course, users[0], antilevels[0])
|
|
self.assertNotIn(users[0], Group.objects.get(name=get_access_group_name(self.course, levels[0])).user_set.all())
|
|
self.assertIn(users[1], Group.objects.get(name=get_access_group_name(self.course, levels[1])).user_set.all())
|
|
self.assertIn(users[2], Group.objects.get(name=get_access_group_name(self.course, levels[2])).user_set.all())
|
|
|
|
revoke_access(self.course, users[1], levels[1])
|
|
allow_access(self.course, users[0], antilevels[0])
|
|
self.assertNotIn(users[0], Group.objects.get(name=get_access_group_name(self.course, levels[0])).user_set.all())
|
|
self.assertIn(users[0], Group.objects.get(name=get_access_group_name(self.course, antilevels[0])).user_set.all())
|
|
self.assertNotIn(users[1], Group.objects.get(name=get_access_group_name(self.course, levels[1])).user_set.all())
|
|
self.assertIn(users[2], Group.objects.get(name=get_access_group_name(self.course, levels[2])).user_set.all())
|
|
|
|
|
|
@override_settings(MODULESTORE=TEST_DATA_MONGO_MODULESTORE)
|
|
class TestInstructorAccessControlPrefilledDB(ModuleStoreTestCase):
|
|
"""
|
|
Test access with existing users.
|
|
"""
|
|
def setUp(self):
|
|
self.course = CourseFactory.create()
|
|
|
|
# setup instructors
|
|
self.instructors = set([UserFactory.create(), UserFactory.create()])
|
|
for user in self.instructors:
|
|
allow_access(self.course, user, 'instructor')
|
|
|
|
def test_list_with_level(self):
|
|
instructors = set(list_with_level(self.course, 'instructor'))
|
|
self.assertEqual(instructors, self.instructors)
|
|
|
|
def test_list_with_level_not_yet_group(self):
|
|
instructors = set(list_with_level(self.course, 'staff'))
|
|
self.assertEqual(instructors, set())
|
|
|
|
def test_list_with_level_bad_group(self):
|
|
self.assertEqual(set(list_with_level(self.course, 'robot-definitely-not-a-group')), set())
|
|
|
|
def test_list_with_level_beta(self):
|
|
beta_testers_result = set(list_with_level(self.course, 'beta'))
|
|
self.assertEqual(set(), beta_testers_result)
|
|
|
|
beta_testers = set([UserFactory.create(), UserFactory.create()])
|
|
for user in beta_testers:
|
|
allow_access(self.course, user, 'beta')
|
|
beta_testers_result = set(list_with_level(self.course, 'beta'))
|
|
self.assertEqual(beta_testers, beta_testers_result)
|
|
|
|
|
|
@override_settings(MODULESTORE=TEST_DATA_MONGO_MODULESTORE)
|
|
class TestInstructorAccessForumDB(ModuleStoreTestCase):
|
|
"""
|
|
Test forum access control.
|
|
"""
|
|
def setUp(self):
|
|
self.course = CourseFactory.create()
|
|
|
|
self.moderators = set([UserFactory.create() for _ in xrange(4)])
|
|
self.mod_role = Role.objects.create(course_id=self.course.id, name=FORUM_ROLE_MODERATOR)
|
|
for user in self.moderators:
|
|
self.mod_role.users.add(user)
|
|
|
|
def test_update_forum_membership_allow_existing_role(self):
|
|
user = UserFactory.create()
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_MODERATOR, 'allow')
|
|
self.assertIn(user, self.mod_role.users.all())
|
|
|
|
def test_update_forum_membership_allow_existing_role_allowed_user(self):
|
|
user = UserFactory.create()
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_MODERATOR, 'allow')
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_MODERATOR, 'allow')
|
|
self.assertIn(user, self.mod_role.users.all())
|
|
|
|
@raises(Role.DoesNotExist)
|
|
def test_update_forum_membership_allow_not_existing_role(self):
|
|
user = UserFactory.create()
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_COMMUNITY_TA, 'allow')
|
|
|
|
def test_update_forum_membership_revoke_existing_role(self):
|
|
user = iter(self.moderators).next()
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_MODERATOR, 'revoke')
|
|
self.assertNotIn(user, self.mod_role.users.all())
|
|
|
|
def test_update_forum_membership_existing_role_revoked_user(self):
|
|
user = iter(self.moderators).next()
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_MODERATOR, 'revoke')
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_MODERATOR, 'revoke')
|
|
self.assertNotIn(user, self.mod_role.users.all())
|
|
|
|
@raises(Role.DoesNotExist)
|
|
def test_update_forum_membership_revoke_not_existing_role(self):
|
|
user = iter(self.moderators).next()
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_COMMUNITY_TA, 'revoke')
|
|
|
|
@raises(Role.DoesNotExist)
|
|
def test_update_forum_membership_bad_role_allow(self):
|
|
user = UserFactory.create()
|
|
update_forum_role_membership(self.course.id, user, 'robot-definitely-not-a-forum-role', 'allow')
|
|
|
|
@raises(Role.DoesNotExist)
|
|
def test_update_forum_membership_bad_role_revoke(self):
|
|
user = UserFactory.create()
|
|
update_forum_role_membership(self.course.id, user, 'robot-definitely-not-a-forum-role', 'revoke')
|
|
|
|
@raises(ValueError)
|
|
def test_update_forum_membership_bad_mode(self):
|
|
user = iter(self.moderators).next()
|
|
update_forum_role_membership(self.course.id, user, FORUM_ROLE_MODERATOR, 'robot-not-a-mode')
|