151bd13666
* Generate common/djangoapps import shims for LMS * Generate common/djangoapps import shims for Studio * Stop appending project root to sys.path * Stop appending common/djangoapps to sys.path * Import from common.djangoapps.course_action_state instead of course_action_state * Import from common.djangoapps.course_modes instead of course_modes * Import from common.djangoapps.database_fixups instead of database_fixups * Import from common.djangoapps.edxmako instead of edxmako * Import from common.djangoapps.entitlements instead of entitlements * Import from common.djangoapps.pipline_mako instead of pipeline_mako * Import from common.djangoapps.static_replace instead of static_replace * Import from common.djangoapps.student instead of student * Import from common.djangoapps.terrain instead of terrain * Import from common.djangoapps.third_party_auth instead of third_party_auth * Import from common.djangoapps.track instead of track * Import from common.djangoapps.util instead of util * Import from common.djangoapps.xblock_django instead of xblock_django * Add empty common/djangoapps/__init__.py to fix pytest collection * Fix pylint formatting violations * Exclude import_shims/ directory tree from linting
117 lines
4.1 KiB
Python
117 lines
4.1 KiB
Python
"""
|
|
These are tests for disabling and enabling student accounts, and for making sure
|
|
that students with disabled accounts are unable to access the courseware.
|
|
"""
|
|
|
|
|
|
import unittest
|
|
|
|
from django.conf import settings
|
|
from django.test import Client, TestCase
|
|
from django.urls import reverse
|
|
|
|
from common.djangoapps.student.models import UserStanding
|
|
from common.djangoapps.student.tests.factories import UserFactory, UserStandingFactory
|
|
|
|
|
|
class UserStandingTest(TestCase):
|
|
"""test suite for user standing view for enabling and disabling accounts"""
|
|
|
|
def setUp(self):
|
|
super(UserStandingTest, self).setUp()
|
|
# create users
|
|
self.bad_user = UserFactory.create(
|
|
username='bad_user',
|
|
)
|
|
self.good_user = UserFactory.create(
|
|
username='good_user',
|
|
)
|
|
self.non_staff = UserFactory.create(
|
|
username='non_staff',
|
|
)
|
|
self.admin = UserFactory.create(
|
|
username='admin',
|
|
is_staff=True,
|
|
)
|
|
|
|
# create clients
|
|
self.bad_user_client = Client()
|
|
self.good_user_client = Client()
|
|
self.non_staff_client = Client()
|
|
self.admin_client = Client()
|
|
|
|
for user, client in [
|
|
(self.bad_user, self.bad_user_client),
|
|
(self.good_user, self.good_user_client),
|
|
(self.non_staff, self.non_staff_client),
|
|
(self.admin, self.admin_client),
|
|
]:
|
|
client.login(username=user.username, password='test')
|
|
|
|
UserStandingFactory.create(
|
|
user=self.bad_user,
|
|
account_status=UserStanding.ACCOUNT_DISABLED,
|
|
changed_by=self.admin
|
|
)
|
|
|
|
# set stock url to test disabled accounts' access to site
|
|
self.some_url = '/'
|
|
|
|
# since it's only possible to disable accounts from lms, we're going
|
|
# to skip tests for cms
|
|
|
|
@unittest.skipUnless(settings.ROOT_URLCONF == 'lms.urls', 'Test only valid in lms')
|
|
def test_can_access_manage_account_page(self):
|
|
response = self.admin_client.get(reverse('manage_user_standing'), {
|
|
'user': self.admin,
|
|
})
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
@unittest.skipUnless(settings.ROOT_URLCONF == 'lms.urls', 'Test only valid in lms')
|
|
def test_disable_account(self):
|
|
self.assertEqual(
|
|
UserStanding.objects.filter(user=self.good_user).count(), 0
|
|
)
|
|
response = self.admin_client.post(reverse('disable_account_ajax'), {
|
|
'username': self.good_user.username,
|
|
'account_action': 'disable',
|
|
})
|
|
self.assertEqual(
|
|
UserStanding.objects.get(user=self.good_user).account_status,
|
|
UserStanding.ACCOUNT_DISABLED
|
|
)
|
|
|
|
def test_disabled_account_403s(self):
|
|
response = self.bad_user_client.get(self.some_url)
|
|
self.assertEqual(response.status_code, 403)
|
|
|
|
@unittest.skipUnless(settings.ROOT_URLCONF == 'lms.urls', 'Test only valid in lms')
|
|
def test_reenable_account(self):
|
|
response = self.admin_client.post(reverse('disable_account_ajax'), {
|
|
'username': self.bad_user.username,
|
|
'account_action': 'reenable'
|
|
})
|
|
self.assertEqual(
|
|
UserStanding.objects.get(user=self.bad_user).account_status,
|
|
UserStanding.ACCOUNT_ENABLED
|
|
)
|
|
|
|
@unittest.skipUnless(settings.ROOT_URLCONF == 'lms.urls', 'Test only valid in lms')
|
|
def test_non_staff_cant_access_disable_view(self):
|
|
response = self.non_staff_client.get(reverse('manage_user_standing'), {
|
|
'user': self.non_staff,
|
|
})
|
|
self.assertEqual(response.status_code, 404)
|
|
|
|
@unittest.skipUnless(settings.ROOT_URLCONF == 'lms.urls', 'Test only valid in lms')
|
|
def test_non_staff_cant_disable_account(self):
|
|
response = self.non_staff_client.post(reverse('disable_account_ajax'), {
|
|
'username': self.good_user.username,
|
|
'user': self.non_staff,
|
|
'account_action': 'disable'
|
|
})
|
|
self.assertEqual(response.status_code, 404)
|
|
self.assertEqual(
|
|
UserStanding.objects.filter(user=self.good_user).count(), 0
|
|
)
|