janeway/src/api/tests/test_api.py at 1978afbc64fee52c803071115925c0ea6b60e0b3 · openlibhums/janeway · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
from django.test import TestCase, override_settings
from django.urls import reverse
from django.utils import timezone

from rest_framework.test import APIClient

from utils.testing import helpers
from core import models as core_models
from submission import models as submission_models


class TestAPI(TestCase):
    @classmethod
    def setUpTestData(cls):
        cls.press = helpers.create_press()
        cls.journal, cls.hidden_journal = helpers.create_journals()
        cls.hidden_journal.hide_from_press = True
        cls.hidden_journal.save()
        cls.staff_member = helpers.create_user(
            username="t.paris@voyager.com",
            roles=["author"],
            journal=cls.journal,
            is_staff=True,
            is_active=True,
        )
        cls.editor = helpers.create_user(
            username="h.kim@voyager.com",
            roles=["editor"],
            journal=cls.journal,
            is_active=True,
        )
        cls.average_user = helpers.create_user(
            "a.redshirt@voyager.com",
            roles=["author"],
            journal=cls.journal,
            is_active=True,
        )
        helpers.create_roles(
            ["journal-manager"],
        )
        cls.hidden_article = helpers.create_article(
            cls.hidden_journal,
            with_author=True,
            title="Article in journal hidden from press",
        )
        cls.hidden_article.stage = submission_models.STAGE_PUBLISHED
        cls.hidden_article.date_published = timezone.now()
        cls.hidden_article.save()
        cls.api_client = APIClient()

    @override_settings(URL_CONFIG="domain")
    def test_staff_member_can_assign_journal_manager_role(self):
        self.api_client.force_authenticate(user=self.staff_member)
        url = self.journal.site_url(
            reverse(
                "accountrole-list",
            )
        )
        journal_manager_role = core_models.Role.objects.get(
            slug="journal-manager",
        )
        self.api_client.post(
            path=url,
            data={
                "user": self.average_user.pk,
                "role": journal_manager_role.pk,
                "journal": self.journal.pk,
            },
            SERVER_NAME=self.journal.domain,
        )
        self.assertTrue(
            self.average_user.check_role(
                self.journal,
                journal_manager_role,
            )
        )

    @override_settings(URL_CONFIG="domain")
    def test_editor_cannot_assign_journal_manager_role(self):
        self.api_client.force_authenticate(user=self.editor)
        url = self.journal.site_url(
            reverse(
                "accountrole-list",
            )
        )
        journal_manager_role = core_models.Role.objects.get(
            slug="journal-manager",
        )
        self.api_client.post(
            path=url,
            data={
                "user": self.average_user.pk,
                "role": journal_manager_role.pk,
                "journal": self.journal.pk,
            },
            SERVER_NAME=self.journal.domain,
        )
        self.assertFalse(
            self.average_user.check_role(
                self.journal,
                journal_manager_role,
            )
        )

    @override_settings(URL_CONFIG="domain")
    def test_press_api_excludes_journal_hidden_from_press(self):
        url = self.press.site_url(reverse("journal-list"))
        response = self.api_client.get(
            url,
            SERVER_NAME=self.press.domain,
        )
        self.assertNotIn(
            self.hidden_journal.pk,
            [journal["pk"] for journal in response.json().get("results", [])],
        )

    @override_settings(URL_CONFIG="domain")
    def test_press_api_excludes_article_in_journal_hidden_from_press(self):
        url = self.press.site_url(reverse("article-list"))
        response = self.api_client.get(
            url,
            SERVER_NAME=self.press.domain,
        )
        self.assertNotIn(
            self.hidden_article.title,
            [article["title"] for article in response.json().get("results", [])],
        )

    @override_settings(URL_CONFIG="domain")
    def test_api_works_at_journal_level_even_if_hidden_from_press(self):
        url = self.hidden_journal.site_url(reverse("article-list"))
        response = self.api_client.get(
            url,
            SERVER_NAME=self.hidden_journal.domain,
        )
        self.assertIn(
            self.hidden_article.title,
            [article["title"] for article in response.json().get("results", [])],
        )