1 # coding: utf-8

     2 

     3 import re

     4 import datetime

     5 

     6 from django.conf import settings

     7 from django.core.exceptions import SuspiciousOperation

     8 from django.core.files import temp as tempfile

     9 # Register auth models with the admin.

    10 from django.contrib.auth import REDIRECT_FIELD_NAME, admin

    11 from django.contrib.auth.models import User, Permission, UNUSABLE_PASSWORD

    12 from django.contrib.contenttypes.models import ContentType

    13 from django.contrib.admin.models import LogEntry, DELETION

    14 from django.contrib.admin.sites import LOGIN_FORM_KEY

    15 from django.contrib.admin.util import quote

    16 from django.contrib.admin.helpers import ACTION_CHECKBOX_NAME

    17 from django.forms.util import ErrorList

    18 from django.test import TestCase

    19 from django.utils import formats

    20 from django.utils.cache import get_max_age

    21 from django.utils.encoding import iri_to_uri

    22 from django.utils.html import escape

    23 from django.utils.translation import activate, deactivate

    24 import django.template.context

    25 

    26 # local test models

    27 from models import Article, BarAccount, CustomArticle, EmptyModel, \

    28     FooAccount, Gallery, ModelWithStringPrimaryKey, \

    29     Person, Persona, Picture, Podcast, Section, Subscriber, Vodcast, \

    30     Language, Collector, Widget, Grommet, DooHickey, FancyDoodad, Whatsit, \

    31     Category, Post, Plot, FunkyTag

    32 

    33 

    34 class AdminViewBasicTest(TestCase):

    35     fixtures = ['admin-views-users.xml', 'admin-views-colors.xml', 'admin-views-fabrics.xml']

    36 

    37     # Store the bit of the URL where the admin is registered as a class

    38     # variable. That way we can test a second AdminSite just by subclassing

    39     # this test case and changing urlbit.

    40     urlbit = 'admin'

    41 

    42     def setUp(self):

    43         self.old_language_code = settings.LANGUAGE_CODE

    44         self.client.login(username='super', password='secret')

    45 

    46     def tearDown(self):

    47         settings.LANGUAGE_CODE = self.old_language_code

    48         self.client.logout()

    49 

    50     def testTrailingSlashRequired(self):

    51         """

    52         If you leave off the trailing slash, app should redirect and add it.

    53         """

    54         request = self.client.get('/test_admin/%s/admin_views/article/add' % self.urlbit)

    55         self.assertRedirects(request,

    56             '/test_admin/%s/admin_views/article/add/' % self.urlbit, status_code=301

    57         )

    58 

    59     def testBasicAddGet(self):

    60         """

    61         A smoke test to ensure GET on the add_view works.

    62         """

    63         response = self.client.get('/test_admin/%s/admin_views/section/add/' % self.urlbit)

    64         self.assertEqual(response.status_code, 200)

    65 

    66     def testAddWithGETArgs(self):

    67         response = self.client.get('/test_admin/%s/admin_views/section/add/' % self.urlbit, {'name': 'My Section'})

    68         self.assertEqual(response.status_code, 200)

    69         self.assertTrue(

    70             'value="My Section"' in response.content,

    71             "Couldn't find an input with the right value in the response."

    72         )

    73 

    74     def testBasicEditGet(self):

    75         """

    76         A smoke test to ensure GET on the change_view works.

    77         """

    78         response = self.client.get('/test_admin/%s/admin_views/section/1/' % self.urlbit)

    79         self.assertEqual(response.status_code, 200)

    80 

    81     def testBasicEditGetStringPK(self):

    82         """

    83         A smoke test to ensure GET on the change_view works (returns an HTTP

    84         404 error, see #11191) when passing a string as the PK argument for a

    85         model with an integer PK field.

    86         """

    87         response = self.client.get('/test_admin/%s/admin_views/section/abc/' % self.urlbit)

    88         self.assertEqual(response.status_code, 404)

    89 

    90     def testBasicAddPost(self):

    91         """

    92         A smoke test to ensure POST on add_view works.

    93         """

    94         post_data = {

    95             "name": u"Another Section",

    96             # inline data

    97             "article_set-TOTAL_FORMS": u"3",

    98             "article_set-INITIAL_FORMS": u"0",

    99             "article_set-MAX_NUM_FORMS": u"0",

   100         }

   101         response = self.client.post('/test_admin/%s/admin_views/section/add/' % self.urlbit, post_data)

   102         self.assertEqual(response.status_code, 302) # redirect somewhere

   103 

   104     # Post data for edit inline

   105     inline_post_data = {

   106         "name": u"Test section",

   107         # inline data

   108         "article_set-TOTAL_FORMS": u"6",

   109         "article_set-INITIAL_FORMS": u"3",

   110         "article_set-MAX_NUM_FORMS": u"0",

   111         "article_set-0-id": u"1",

   112         # there is no title in database, give one here or formset will fail.

   113         "article_set-0-title": u"Norske bostaver æøå skaper problemer",

   114         "article_set-0-content": u"<p>Middle content</p>",

   115         "article_set-0-date_0": u"2008-03-18",

   116         "article_set-0-date_1": u"11:54:58",

   117         "article_set-0-section": u"1",

   118         "article_set-1-id": u"2",

   119         "article_set-1-title": u"Need a title.",

   120         "article_set-1-content": u"<p>Oldest content</p>",

   121         "article_set-1-date_0": u"2000-03-18",

   122         "article_set-1-date_1": u"11:54:58",

   123         "article_set-2-id": u"3",

   124         "article_set-2-title": u"Need a title.",

   125         "article_set-2-content": u"<p>Newest content</p>",

   126         "article_set-2-date_0": u"2009-03-18",

   127         "article_set-2-date_1": u"11:54:58",

   128         "article_set-3-id": u"",

   129         "article_set-3-title": u"",

   130         "article_set-3-content": u"",

   131         "article_set-3-date_0": u"",

   132         "article_set-3-date_1": u"",

   133         "article_set-4-id": u"",

   134         "article_set-4-title": u"",

   135         "article_set-4-content": u"",

   136         "article_set-4-date_0": u"",

   137         "article_set-4-date_1": u"",

   138         "article_set-5-id": u"",

   139         "article_set-5-title": u"",

   140         "article_set-5-content": u"",

   141         "article_set-5-date_0": u"",

   142         "article_set-5-date_1": u"",

   143     }

   144 

   145     def testBasicEditPost(self):

   146         """

   147         A smoke test to ensure POST on edit_view works.

   148         """

   149         response = self.client.post('/test_admin/%s/admin_views/section/1/' % self.urlbit, self.inline_post_data)

   150         self.assertEqual(response.status_code, 302) # redirect somewhere

   151 

   152     def testEditSaveAs(self):

   153         """

   154         Test "save as".

   155         """

   156         post_data = self.inline_post_data.copy()

   157         post_data.update({

   158             '_saveasnew': u'Save+as+new',

   159             "article_set-1-section": u"1",

   160             "article_set-2-section": u"1",

   161             "article_set-3-section": u"1",

   162             "article_set-4-section": u"1",

   163             "article_set-5-section": u"1",

   164         })

   165         response = self.client.post('/test_admin/%s/admin_views/section/1/' % self.urlbit, post_data)

   166         self.assertEqual(response.status_code, 302) # redirect somewhere

   167 

   168     def testChangeListSortingCallable(self):

   169         """

   170         Ensure we can sort on a list_display field that is a callable

   171         (column 2 is callable_year in ArticleAdmin)

   172         """

   173         response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'ot': 'asc', 'o': 2})

   174         self.assertEqual(response.status_code, 200)

   175         self.assertTrue(

   176             response.content.index('Oldest content') < response.content.index('Middle content') and

   177             response.content.index('Middle content') < response.content.index('Newest content'),

   178             "Results of sorting on callable are out of order."

   179         )

   180 

   181     def testChangeListSortingModel(self):

   182         """

   183         Ensure we can sort on a list_display field that is a Model method

   184         (colunn 3 is 'model_year' in ArticleAdmin)

   185         """

   186         response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'ot': 'dsc', 'o': 3})

   187         self.assertEqual(response.status_code, 200)

   188         self.assertTrue(

   189             response.content.index('Newest content') < response.content.index('Middle content') and

   190             response.content.index('Middle content') < response.content.index('Oldest content'),

   191             "Results of sorting on Model method are out of order."

   192         )

   193 

   194     def testChangeListSortingModelAdmin(self):

   195         """

   196         Ensure we can sort on a list_display field that is a ModelAdmin method

   197         (colunn 4 is 'modeladmin_year' in ArticleAdmin)

   198         """

   199         response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'ot': 'asc', 'o': 4})

   200         self.assertEqual(response.status_code, 200)

   201         self.assertTrue(

   202             response.content.index('Oldest content') < response.content.index('Middle content') and

   203             response.content.index('Middle content') < response.content.index('Newest content'),

   204             "Results of sorting on ModelAdmin method are out of order."

   205         )

   206 

   207     def testLimitedFilter(self):

   208         """Ensure admin changelist filters do not contain objects excluded via limit_choices_to."""

   209         response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit)

   210         self.assertEqual(response.status_code, 200)

   211         self.assertTrue(

   212             '<div id="changelist-filter">' in response.content,

   213             "Expected filter not found in changelist view."

   214         )

   215         self.assertFalse(

   216             '<a href="?color__id__exact=3">Blue</a>' in response.content,

   217             "Changelist filter not correctly limited by limit_choices_to."

   218         )

   219 

   220     def testIncorrectLookupParameters(self):

   221         """Ensure incorrect lookup parameters are handled gracefully."""

   222         response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'notarealfield': '5'})

   223         self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)

   224         response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'color__id__exact': 'StringNotInteger!'})

   225         self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)

   226 

   227     def testIsNullLookups(self):

   228         """Ensure is_null is handled correctly."""

   229         Article.objects.create(title="I Could Go Anywhere", content="Versatile", date=datetime.datetime.now())

   230         response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit)

   231         self.assertTrue('4 articles' in response.content, '"4 articles" missing from response')

   232         response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': 'false'})

   233         self.assertTrue('3 articles' in response.content, '"3 articles" missing from response')

   234         response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': 'true'})

   235         self.assertTrue('1 article' in response.content, '"1 article" missing from response')

   236 

   237     def testLogoutAndPasswordChangeURLs(self):

   238         response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit)

   239         self.assertFalse('<a href="/test_admin/%s/logout/">' % self.urlbit not in response.content)

   240         self.assertFalse('<a href="/test_admin/%s/password_change/">' % self.urlbit not in response.content)

   241 

   242     def testNamedGroupFieldChoicesChangeList(self):

   243         """

   244         Ensures the admin changelist shows correct values in the relevant column

   245         for rows corresponding to instances of a model in which a named group

   246         has been used in the choices option of a field.

   247         """

   248         response = self.client.get('/test_admin/%s/admin_views/fabric/' % self.urlbit)

   249         self.assertEqual(response.status_code, 200)

   250         self.assertTrue(

   251             '<a href="1/">Horizontal</a>' in response.content and

   252             '<a href="2/">Vertical</a>' in response.content,

   253             "Changelist table isn't showing the right human-readable values set by a model field 'choices' option named group."

   254         )

   255 

   256     def testNamedGroupFieldChoicesFilter(self):

   257         """

   258         Ensures the filter UI shows correctly when at least one named group has

   259         been used in the choices option of a model field.

   260         """

   261         response = self.client.get('/test_admin/%s/admin_views/fabric/' % self.urlbit)

   262         self.assertEqual(response.status_code, 200)

   263         self.assertTrue(

   264             '<div id="changelist-filter">' in response.content,

   265             "Expected filter not found in changelist view."

   266         )

   267         self.assertTrue(

   268             '<a href="?surface__exact=x">Horizontal</a>' in response.content and

   269             '<a href="?surface__exact=y">Vertical</a>' in response.content,

   270             "Changelist filter isn't showing options contained inside a model field 'choices' option named group."

   271         )

   272 

   273     def testChangeListNullBooleanDisplay(self):

   274         Post.objects.create(public=None)

   275         # This hard-codes the URl because it'll fail if it runs

   276         # against the 'admin2' custom admin (which doesn't have the

   277         # Post model).

   278         response = self.client.get("/test_admin/admin/admin_views/post/")

   279         self.assertTrue('icon-unknown.gif' in response.content)

   280 

   281     def testI18NLanguageNonEnglishDefault(self):

   282         """

   283         Check if the Javascript i18n view returns an empty language catalog

   284         if the default language is non-English but the selected language

   285         is English. See #13388 and #3594 for more details.

   286         """

   287         settings.LANGUAGE_CODE = 'fr'

   288         activate('en-us')

   289         response = self.client.get('/test_admin/admin/jsi18n/')

   290         self.assertNotContains(response, 'Choisir une heure')

   291         deactivate()

   292 

   293     def testI18NLanguageNonEnglishFallback(self):

   294         """

   295         Makes sure that the fallback language is still working properly

   296         in cases where the selected language cannot be found.

   297         """

   298         settings.LANGUAGE_CODE = 'fr'

   299         activate('none')

   300         response = self.client.get('/test_admin/admin/jsi18n/')

   301         self.assertContains(response, 'Choisir une heure')

   302         deactivate()

   303 

   304     def test_disallowed_filtering(self):

   305         self.assertRaises(SuspiciousOperation,

   306             self.client.get, "/test_admin/admin/admin_views/album/?owner__email__startswith=fuzzy"

   307         )

   308 

   309 class SaveAsTests(TestCase):

   310     fixtures = ['admin-views-users.xml','admin-views-person.xml']

   311 

   312     def setUp(self):

   313         self.client.login(username='super', password='secret')

   314 

   315     def tearDown(self):

   316         self.client.logout()

   317 

   318     def test_save_as_duplication(self):

   319         """Ensure save as actually creates a new person"""

   320         post_data = {'_saveasnew':'', 'name':'John M', 'gender':1}

   321         response = self.client.post('/test_admin/admin/admin_views/person/1/', post_data)

   322         self.assertEqual(len(Person.objects.filter(name='John M')), 1)

   323         self.assertEqual(len(Person.objects.filter(id=1)), 1)

   324 

   325     def test_save_as_display(self):

   326         """

   327         Ensure that 'save as' is displayed when activated and after submitting

   328         invalid data aside save_as_new will not show us a form to overwrite the

   329         initial model.

   330         """

   331         response = self.client.get('/test_admin/admin/admin_views/person/1/')

   332         self.assert_(response.context['save_as'])

   333         post_data = {'_saveasnew':'', 'name':'John M', 'gender':3, 'alive':'checked'}

   334         response = self.client.post('/test_admin/admin/admin_views/person/1/', post_data)

   335         self.assertEqual(response.context['form_url'], '../add/')

   336 

   337 class CustomModelAdminTest(AdminViewBasicTest):

   338     urlbit = "admin2"

   339 

   340     def testCustomAdminSiteLoginTemplate(self):

   341         self.client.logout()

   342         request = self.client.get('/test_admin/admin2/')

   343         self.assertTemplateUsed(request, 'custom_admin/login.html')

   344         self.assert_('Hello from a custom login template' in request.content)

   345 

   346     def testCustomAdminSiteLogoutTemplate(self):

   347         request = self.client.get('/test_admin/admin2/logout/')

   348         self.assertTemplateUsed(request, 'custom_admin/logout.html')

   349         self.assert_('Hello from a custom logout template' in request.content)

   350 

   351     def testCustomAdminSiteIndexViewAndTemplate(self):

   352         request = self.client.get('/test_admin/admin2/')

   353         self.assertTemplateUsed(request, 'custom_admin/index.html')

   354         self.assert_('Hello from a custom index template *bar*' in request.content)

   355 

   356     def testCustomAdminSitePasswordChangeTemplate(self):

   357         request = self.client.get('/test_admin/admin2/password_change/')

   358         self.assertTemplateUsed(request, 'custom_admin/password_change_form.html')

   359         self.assert_('Hello from a custom password change form template' in request.content)

   360 

   361     def testCustomAdminSitePasswordChangeDoneTemplate(self):

   362         request = self.client.get('/test_admin/admin2/password_change/done/')

   363         self.assertTemplateUsed(request, 'custom_admin/password_change_done.html')

   364         self.assert_('Hello from a custom password change done template' in request.content)

   365 

   366     def testCustomAdminSiteView(self):

   367         self.client.login(username='super', password='secret')

   368         response = self.client.get('/test_admin/%s/my_view/' % self.urlbit)

   369         self.assert_(response.content == "Django is a magical pony!", response.content)

   370 

   371 def get_perm(Model, perm):

   372     """Return the permission object, for the Model"""

   373     ct = ContentType.objects.get_for_model(Model)

   374     return Permission.objects.get(content_type=ct, codename=perm)

   375 

   376 class AdminViewPermissionsTest(TestCase):

   377     """Tests for Admin Views Permissions."""

   378 

   379     fixtures = ['admin-views-users.xml']

   380 

   381     def setUp(self):

   382         """Test setup."""

   383         # Setup permissions, for our users who can add, change, and delete.

   384         # We can't put this into the fixture, because the content type id

   385         # and the permission id could be different on each run of the test.

   386 

   387         opts = Article._meta

   388 

   389         # User who can add Articles

   390         add_user = User.objects.get(username='adduser')

   391         add_user.user_permissions.add(get_perm(Article,

   392             opts.get_add_permission()))

   393 

   394         # User who can change Articles

   395         change_user = User.objects.get(username='changeuser')

   396         change_user.user_permissions.add(get_perm(Article,

   397             opts.get_change_permission()))

   398 

   399         # User who can delete Articles

   400         delete_user = User.objects.get(username='deleteuser')

   401         delete_user.user_permissions.add(get_perm(Article,

   402             opts.get_delete_permission()))

   403 

   404         delete_user.user_permissions.add(get_perm(Section,

   405             Section._meta.get_delete_permission()))

   406 

   407         # login POST dicts

   408         self.super_login = {

   409                      LOGIN_FORM_KEY: 1,

   410                      'username': 'super',

   411                      'password': 'secret'}

   412         self.super_email_login = {

   413                      LOGIN_FORM_KEY: 1,

   414                      'username': 'super@example.com',

   415                      'password': 'secret'}

   416         self.super_email_bad_login = {

   417                       LOGIN_FORM_KEY: 1,

   418                       'username': 'super@example.com',

   419                       'password': 'notsecret'}

   420         self.adduser_login = {

   421                      LOGIN_FORM_KEY: 1,

   422                      'username': 'adduser',

   423                      'password': 'secret'}

   424         self.changeuser_login = {

   425                      LOGIN_FORM_KEY: 1,

   426                      'username': 'changeuser',

   427                      'password': 'secret'}

   428         self.deleteuser_login = {

   429                      LOGIN_FORM_KEY: 1,

   430                      'username': 'deleteuser',

   431                      'password': 'secret'}

   432         self.joepublic_login = {

   433                      LOGIN_FORM_KEY: 1,

   434                      'username': 'joepublic',

   435                      'password': 'secret'}

   436         self.no_username_login = {

   437                      LOGIN_FORM_KEY: 1,

   438                      'password': 'secret'}

   439 

   440     def testLogin(self):

   441         """

   442         Make sure only staff members can log in.

   443 

   444         Successful posts to the login page will redirect to the orignal url.

   445         Unsuccessfull attempts will continue to render the login page with

   446         a 200 status code.

   447         """

   448         # Super User

   449         request = self.client.get('/test_admin/admin/')

   450         self.assertEqual(request.status_code, 200)

   451         login = self.client.post('/test_admin/admin/', self.super_login)

   452         self.assertRedirects(login, '/test_admin/admin/')

   453         self.assertFalse(login.context)

   454         self.client.get('/test_admin/admin/logout/')

   455 

   456         # Test if user enters e-mail address

   457         request = self.client.get('/test_admin/admin/')

   458         self.assertEqual(request.status_code, 200)

   459         login = self.client.post('/test_admin/admin/', self.super_email_login)

   460         self.assertContains(login, "Your e-mail address is not your username")

   461         # only correct passwords get a username hint

   462         login = self.client.post('/test_admin/admin/', self.super_email_bad_login)

   463         self.assertContains(login, "Please enter a correct username and password")

   464         new_user = User(username='jondoe', password='secret', email='super@example.com')

   465         new_user.save()

   466         # check to ensure if there are multiple e-mail addresses a user doesn't get a 500

   467         login = self.client.post('/test_admin/admin/', self.super_email_login)

   468         self.assertContains(login, "Please enter a correct username and password")

   469 

   470         # Add User

   471         request = self.client.get('/test_admin/admin/')

   472         self.assertEqual(request.status_code, 200)

   473         login = self.client.post('/test_admin/admin/', self.adduser_login)

   474         self.assertRedirects(login, '/test_admin/admin/')

   475         self.assertFalse(login.context)

   476         self.client.get('/test_admin/admin/logout/')

   477 

   478         # Change User

   479         request = self.client.get('/test_admin/admin/')

   480         self.assertEqual(request.status_code, 200)

   481         login = self.client.post('/test_admin/admin/', self.changeuser_login)

   482         self.assertRedirects(login, '/test_admin/admin/')

   483         self.assertFalse(login.context)

   484         self.client.get('/test_admin/admin/logout/')

   485 

   486         # Delete User

   487         request = self.client.get('/test_admin/admin/')

   488         self.assertEqual(request.status_code, 200)

   489         login = self.client.post('/test_admin/admin/', self.deleteuser_login)

   490         self.assertRedirects(login, '/test_admin/admin/')

   491         self.assertFalse(login.context)

   492         self.client.get('/test_admin/admin/logout/')

   493 

   494         # Regular User should not be able to login.

   495         request = self.client.get('/test_admin/admin/')

   496         self.assertEqual(request.status_code, 200)

   497         login = self.client.post('/test_admin/admin/', self.joepublic_login)

   498         self.assertEqual(login.status_code, 200)

   499         self.assertContains(login, "Please enter a correct username and password.")

   500 

   501         # Requests without username should not return 500 errors.

   502         request = self.client.get('/test_admin/admin/')

   503         self.assertEqual(request.status_code, 200)

   504         login = self.client.post('/test_admin/admin/', self.no_username_login)

   505         self.assertEqual(login.status_code, 200)

   506         form = login.context[0].get('form')

   507         self.assert_(login.context[0].get('error_message'))

   508 

   509     def testLoginSuccessfullyRedirectsToOriginalUrl(self):

   510         request = self.client.get('/test_admin/admin/')

   511         self.assertEqual(request.status_code, 200)

   512         query_string = 'the-answer=42'

   513         redirect_url = '/test_admin/admin/?%s' % query_string

   514         new_next = {REDIRECT_FIELD_NAME: redirect_url}

   515         login = self.client.post('/test_admin/admin/', dict(self.super_login, **new_next), QUERY_STRING=query_string)

   516         self.assertRedirects(login, redirect_url)

   517 

   518     def testAddView(self):

   519         """Test add view restricts access and actually adds items."""

   520 

   521         add_dict = {'title' : 'Døm ikke',

   522                     'content': '<p>great article</p>',

   523                     'date_0': '2008-03-18', 'date_1': '10:54:39',

   524                     'section': 1}

   525 

   526         # Change User should not have access to add articles

   527         self.client.get('/test_admin/admin/')

   528         self.client.post('/test_admin/admin/', self.changeuser_login)

   529         # make sure the view removes test cookie

   530         self.assertEqual(self.client.session.test_cookie_worked(), False)

   531         request = self.client.get('/test_admin/admin/admin_views/article/add/')

   532         self.assertEqual(request.status_code, 403)

   533         # Try POST just to make sure

   534         post = self.client.post('/test_admin/admin/admin_views/article/add/', add_dict)

   535         self.assertEqual(post.status_code, 403)

   536         self.assertEqual(Article.objects.all().count(), 3)

   537         self.client.get('/test_admin/admin/logout/')

   538 

   539         # Add user may login and POST to add view, then redirect to admin root

   540         self.client.get('/test_admin/admin/')

   541         self.client.post('/test_admin/admin/', self.adduser_login)

   542         addpage = self.client.get('/test_admin/admin/admin_views/article/add/')

   543         self.assertEqual(addpage.status_code, 200)

   544         change_list_link = '<a href="../">Articles</a> &rsaquo;'

   545         self.assertFalse(change_list_link in addpage.content,

   546                     'User restricted to add permission is given link to change list view in breadcrumbs.')

   547         post = self.client.post('/test_admin/admin/admin_views/article/add/', add_dict)

   548         self.assertRedirects(post, '/test_admin/admin/')

   549         self.assertEqual(Article.objects.all().count(), 4)

   550         self.client.get('/test_admin/admin/logout/')

   551 

   552         # Super can add too, but is redirected to the change list view

   553         self.client.get('/test_admin/admin/')

   554         self.client.post('/test_admin/admin/', self.super_login)

   555         addpage = self.client.get('/test_admin/admin/admin_views/article/add/')

   556         self.assertEqual(addpage.status_code, 200)

   557         self.assertFalse(change_list_link not in addpage.content,

   558                     'Unrestricted user is not given link to change list view in breadcrumbs.')

   559         post = self.client.post('/test_admin/admin/admin_views/article/add/', add_dict)

   560         self.assertRedirects(post, '/test_admin/admin/admin_views/article/')

   561         self.assertEqual(Article.objects.all().count(), 5)

   562         self.client.get('/test_admin/admin/logout/')

   563 

   564         # 8509 - if a normal user is already logged in, it is possible

   565         # to change user into the superuser without error

   566         login = self.client.login(username='joepublic', password='secret')

   567         # Check and make sure that if user expires, data still persists

   568         self.client.get('/test_admin/admin/')

   569         self.client.post('/test_admin/admin/', self.super_login)

   570         # make sure the view removes test cookie

   571         self.assertEqual(self.client.session.test_cookie_worked(), False)

   572 

   573     def testChangeView(self):

   574         """Change view should restrict access and allow users to edit items."""

   575 

   576         change_dict = {'title' : 'Ikke fordømt',

   577                        'content': '<p>edited article</p>',

   578                        'date_0': '2008-03-18', 'date_1': '10:54:39',

   579                        'section': 1}

   580 

   581         # add user shoud not be able to view the list of article or change any of them

   582         self.client.get('/test_admin/admin/')

   583         self.client.post('/test_admin/admin/', self.adduser_login)

   584         request = self.client.get('/test_admin/admin/admin_views/article/')

   585         self.assertEqual(request.status_code, 403)

   586         request = self.client.get('/test_admin/admin/admin_views/article/1/')

   587         self.assertEqual(request.status_code, 403)

   588         post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)

   589         self.assertEqual(post.status_code, 403)

   590         self.client.get('/test_admin/admin/logout/')

   591 

   592         # change user can view all items and edit them

   593         self.client.get('/test_admin/admin/')

   594         self.client.post('/test_admin/admin/', self.changeuser_login)

   595         request = self.client.get('/test_admin/admin/admin_views/article/')

   596         self.assertEqual(request.status_code, 200)

   597         request = self.client.get('/test_admin/admin/admin_views/article/1/')

   598         self.assertEqual(request.status_code, 200)

   599         post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)

   600         self.assertRedirects(post, '/test_admin/admin/admin_views/article/')

   601         self.assertEqual(Article.objects.get(pk=1).content, '<p>edited article</p>')

   602 

   603         # one error in form should produce singular error message, multiple errors plural

   604         change_dict['title'] = ''

   605         post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)

   606         self.assertEqual(request.status_code, 200)

   607         self.assertTrue('Please correct the error below.' in post.content,

   608                         'Singular error message not found in response to post with one error.')

   609         change_dict['content'] = ''

   610         post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)

   611         self.assertEqual(request.status_code, 200)

   612         self.assertTrue('Please correct the errors below.' in post.content,

   613                         'Plural error message not found in response to post with multiple errors.')

   614         self.client.get('/test_admin/admin/logout/')

   615 

   616     def testCustomModelAdminTemplates(self):

   617         self.client.get('/test_admin/admin/')

   618         self.client.post('/test_admin/admin/', self.super_login)

   619 

   620         # Test custom change list template with custom extra context

   621         request = self.client.get('/test_admin/admin/admin_views/customarticle/')

   622         self.assertEqual(request.status_code, 200)

   623         self.assert_("var hello = 'Hello!';" in request.content)

   624         self.assertTemplateUsed(request, 'custom_admin/change_list.html')

   625 

   626         # Test custom add form template

   627         request = self.client.get('/test_admin/admin/admin_views/customarticle/add/')

   628         self.assertTemplateUsed(request, 'custom_admin/add_form.html')

   629 

   630         # Add an article so we can test delete, change, and history views

   631         post = self.client.post('/test_admin/admin/admin_views/customarticle/add/', {

   632             'content': '<p>great article</p>',

   633             'date_0': '2008-03-18',

   634             'date_1': '10:54:39'

   635         })

   636         self.assertRedirects(post, '/test_admin/admin/admin_views/customarticle/')

   637         self.assertEqual(CustomArticle.objects.all().count(), 1)

   638 

   639         # Test custom delete, change, and object history templates

   640         # Test custom change form template

   641         request = self.client.get('/test_admin/admin/admin_views/customarticle/1/')

   642         self.assertTemplateUsed(request, 'custom_admin/change_form.html')

   643         request = self.client.get('/test_admin/admin/admin_views/customarticle/1/delete/')

   644         self.assertTemplateUsed(request, 'custom_admin/delete_confirmation.html')

   645         request = self.client.post('/test_admin/admin/admin_views/customarticle/', data={

   646                 'index': 0,

   647                 'action': ['delete_selected'],

   648                 '_selected_action': ['1'],

   649             })

   650         self.assertTemplateUsed(request, 'custom_admin/delete_selected_confirmation.html')

   651         request = self.client.get('/test_admin/admin/admin_views/customarticle/1/history/')

   652         self.assertTemplateUsed(request, 'custom_admin/object_history.html')

   653 

   654         self.client.get('/test_admin/admin/logout/')

   655 

   656     def testDeleteView(self):

   657         """Delete view should restrict access and actually delete items."""

   658 

   659         delete_dict = {'post': 'yes'}

   660 

   661         # add user shoud not be able to delete articles

   662         self.client.get('/test_admin/admin/')

   663         self.client.post('/test_admin/admin/', self.adduser_login)

   664         request = self.client.get('/test_admin/admin/admin_views/article/1/delete/')

   665         self.assertEqual(request.status_code, 403)

   666         post = self.client.post('/test_admin/admin/admin_views/article/1/delete/', delete_dict)

   667         self.assertEqual(post.status_code, 403)

   668         self.assertEqual(Article.objects.all().count(), 3)

   669         self.client.get('/test_admin/admin/logout/')

   670 

   671         # Delete user can delete

   672         self.client.get('/test_admin/admin/')

   673         self.client.post('/test_admin/admin/', self.deleteuser_login)

   674         response = self.client.get('/test_admin/admin/admin_views/section/1/delete/')

   675          # test response contains link to related Article

   676         self.assertContains(response, "admin_views/article/1/")

   677 

   678         response = self.client.get('/test_admin/admin/admin_views/article/1/delete/')

   679         self.assertEqual(response.status_code, 200)

   680         post = self.client.post('/test_admin/admin/admin_views/article/1/delete/', delete_dict)

   681         self.assertRedirects(post, '/test_admin/admin/')

   682         self.assertEqual(Article.objects.all().count(), 2)

   683         article_ct = ContentType.objects.get_for_model(Article)

   684         logged = LogEntry.objects.get(content_type=article_ct, action_flag=DELETION)

   685         self.assertEqual(logged.object_id, u'1')

   686         self.client.get('/test_admin/admin/logout/')

   687 

   688     def testDisabledPermissionsWhenLoggedIn(self):

   689         self.client.login(username='super', password='secret')

   690         superuser = User.objects.get(username='super')

   691         superuser.is_active = False

   692         superuser.save()

   693 

   694         response = self.client.get('/test_admin/admin/')

   695         self.assertContains(response, 'id="login-form"')

   696         self.assertNotContains(response, 'Log out')

   697 

   698         response = self.client.get('/test_admin/admin/secure-view/')

   699         self.assertContains(response, 'id="login-form"')

   700 

   701 

   702 class AdminViewDeletedObjectsTest(TestCase):

   703     fixtures = ['admin-views-users.xml', 'deleted-objects.xml']

   704 

   705     def setUp(self):

   706         self.client.login(username='super', password='secret')

   707 

   708     def tearDown(self):

   709         self.client.logout()

   710 

   711     def test_nesting(self):

   712         """

   713         Objects should be nested to display the relationships that

   714         cause them to be scheduled for deletion.

   715         """

   716         pattern = re.compile(r"""<li>Plot: <a href=".+/admin_views/plot/1/">World Domination</a>\s*<ul>\s*<li>Plot details: <a href=".+/admin_views/plotdetails/1/">almost finished</a>""")

   717         response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(1))

   718         self.assertTrue(pattern.search(response.content))

   719 

   720     def test_cyclic(self):

   721         """

   722         Cyclic relationships should still cause each object to only be

   723         listed once.

   724 

   725         """

   726         one = """<li>Cyclic one: <a href="/test_admin/admin/admin_views/cyclicone/1/">I am recursive</a>"""

   727         two = """<li>Cyclic two: <a href="/test_admin/admin/admin_views/cyclictwo/1/">I am recursive too</a>"""

   728         response = self.client.get('/test_admin/admin/admin_views/cyclicone/%s/delete/' % quote(1))

   729 

   730         self.assertContains(response, one, 1)

   731         self.assertContains(response, two, 1)

   732 

   733     def test_perms_needed(self):

   734         self.client.logout()

   735         delete_user = User.objects.get(username='deleteuser')

   736         delete_user.user_permissions.add(get_perm(Plot,

   737             Plot._meta.get_delete_permission()))

   738 

   739         self.assertTrue(self.client.login(username='deleteuser',

   740                                           password='secret'))

   741 

   742         response = self.client.get('/test_admin/admin/admin_views/plot/%s/delete/' % quote(1))

   743         self.assertContains(response, "your account doesn't have permission to delete the following types of objects")

   744         self.assertContains(response, "<li>plot details</li>")

   745 

   746 

   747     def test_not_registered(self):

   748         should_contain = """<li>Secret hideout: underground bunker"""

   749         response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(1))

   750         self.assertContains(response, should_contain, 1)

   751 

   752     def test_multiple_fkeys_to_same_model(self):

   753         """

   754         If a deleted object has two relationships from another model,

   755         both of those should be followed in looking for related

   756         objects to delete.

   757 

   758         """

   759         should_contain = """<li>Plot: <a href="/test_admin/admin/admin_views/plot/1/">World Domination</a>"""

   760         response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(1))

   761         self.assertContains(response, should_contain)

   762         response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(2))

   763         self.assertContains(response, should_contain)

   764 

   765     def test_multiple_fkeys_to_same_instance(self):

   766         """

   767         If a deleted object has two relationships pointing to it from

   768         another object, the other object should still only be listed

   769         once.

   770 

   771         """

   772         should_contain = """<li>Plot: <a href="/test_admin/admin/admin_views/plot/2/">World Peace</a></li>"""

   773         response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(2))

   774         self.assertContains(response, should_contain, 1)

   775 

   776     def test_inheritance(self):

   777         """

   778         In the case of an inherited model, if either the child or

   779         parent-model instance is deleted, both instances are listed

   780         for deletion, as well as any relationships they have.

   781 

   782         """

   783         should_contain = [

   784             """<li>Villain: <a href="/test_admin/admin/admin_views/villain/3/">Bob</a>""",

   785             """<li>Super villain: <a href="/test_admin/admin/admin_views/supervillain/3/">Bob</a>""",

   786             """<li>Secret hideout: floating castle""",

   787             """<li>Super secret hideout: super floating castle!"""

   788             ]

   789         response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(3))

   790         for should in should_contain:

   791             self.assertContains(response, should, 1)

   792         response = self.client.get('/test_admin/admin/admin_views/supervillain/%s/delete/' % quote(3))

   793         for should in should_contain:

   794             self.assertContains(response, should, 1)

   795 

   796     def test_generic_relations(self):

   797         """

   798         If a deleted object has GenericForeignKeys pointing to it,

   799         those objects should be listed for deletion.

   800 

   801         """

   802         plot = Plot.objects.get(pk=3)

   803         tag = FunkyTag.objects.create(content_object=plot, name='hott')

   804         should_contain = """<li>Funky tag: hott"""

   805         response = self.client.get('/test_admin/admin/admin_views/plot/%s/delete/' % quote(3))

   806         self.assertContains(response, should_contain)

   807 

   808 class AdminViewStringPrimaryKeyTest(TestCase):

   809     fixtures = ['admin-views-users.xml', 'string-primary-key.xml']

   810 

   811     def __init__(self, *args):

   812         super(AdminViewStringPrimaryKeyTest, self).__init__(*args)

   813         self.pk = """abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 -_.!~*'() ;/?:@&=+$, <>#%" {}|\^[]`"""

   814 

   815     def setUp(self):

   816         self.client.login(username='super', password='secret')

   817         content_type_pk = ContentType.objects.get_for_model(ModelWithStringPrimaryKey).pk

   818         LogEntry.objects.log_action(100, content_type_pk, self.pk, self.pk, 2, change_message='')

   819 

   820     def tearDown(self):

   821         self.client.logout()

   822 

   823     def test_get_history_view(self):

   824         "Retrieving the history for the object using urlencoded form of primary key should work"

   825         response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/history/' % quote(self.pk))

   826         self.assertContains(response, escape(self.pk))

   827         self.assertEqual(response.status_code, 200)

   828 

   829     def test_get_change_view(self):

   830         "Retrieving the object using urlencoded form of primary key should work"

   831         response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(self.pk))

   832         self.assertContains(response, escape(self.pk))

   833         self.assertEqual(response.status_code, 200)

   834 

   835     def test_changelist_to_changeform_link(self):

   836         "The link from the changelist referring to the changeform of the object should be quoted"

   837         response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/')

   838         should_contain = """<th><a href="%s/">%s</a></th></tr>""" % (quote(self.pk), escape(self.pk))

   839         self.assertContains(response, should_contain)

   840 

   841     def test_recentactions_link(self):

   842         "The link from the recent actions list referring to the changeform of the object should be quoted"

   843         response = self.client.get('/test_admin/admin/')

   844         should_contain = """<a href="admin_views/modelwithstringprimarykey/%s/">%s</a>""" % (quote(self.pk), escape(self.pk))

   845         self.assertContains(response, should_contain)

   846 

   847     def test_recentactions_without_content_type(self):

   848         "If a LogEntry is missing content_type it will not display it in span tag under the hyperlink."

   849         response = self.client.get('/test_admin/admin/')

   850         should_contain = """<a href="admin_views/modelwithstringprimarykey/%s/">%s</a>""" % (quote(self.pk), escape(self.pk))

   851         self.assertContains(response, should_contain)

   852         should_contain = "Model with string primary key" # capitalized in Recent Actions

   853         self.assertContains(response, should_contain)

   854         logentry = LogEntry.objects.get(content_type__name__iexact=should_contain)

   855         # http://code.djangoproject.com/ticket/10275

   856         # if the log entry doesn't have a content type it should still be

   857         # possible to view the Recent Actions part

   858         logentry.content_type = None

   859         logentry.save()

   860 

   861         counted_presence_before = response.content.count(should_contain)

   862         response = self.client.get('/test_admin/admin/')

   863         counted_presence_after = response.content.count(should_contain)

   864         self.assertEquals(counted_presence_before - 1,

   865                           counted_presence_after)

   866 

   867     def test_deleteconfirmation_link(self):

   868         "The link from the delete confirmation page referring back to the changeform of the object should be quoted"

   869         response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/delete/' % quote(self.pk))

   870         # this URL now comes through reverse(), thus iri_to_uri encoding

   871         should_contain = """/%s/">%s</a>""" % (iri_to_uri(quote(self.pk)), escape(self.pk))

   872         self.assertContains(response, should_contain)

   873 

   874     def test_url_conflicts_with_add(self):

   875         "A model with a primary key that ends with add should be visible"

   876         add_model = ModelWithStringPrimaryKey(id="i have something to add")

   877         add_model.save()

   878         response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(add_model.pk))

   879         should_contain = """<h1>Change model with string primary key</h1>"""

   880         self.assertContains(response, should_contain)

   881 

   882     def test_url_conflicts_with_delete(self):

   883         "A model with a primary key that ends with delete should be visible"

   884         delete_model = ModelWithStringPrimaryKey(id="delete")

   885         delete_model.save()

   886         response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(delete_model.pk))

   887         should_contain = """<h1>Change model with string primary key</h1>"""

   888         self.assertContains(response, should_contain)

   889 

   890     def test_url_conflicts_with_history(self):

   891         "A model with a primary key that ends with history should be visible"

   892         history_model = ModelWithStringPrimaryKey(id="history")

   893         history_model.save()

   894         response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(history_model.pk))

   895         should_contain = """<h1>Change model with string primary key</h1>"""

   896         self.assertContains(response, should_contain)

   897 

   898 

   899 class SecureViewTest(TestCase):

   900     fixtures = ['admin-views-users.xml']

   901 

   902     def setUp(self):

   903         # login POST dicts

   904         self.super_login = {

   905                      LOGIN_FORM_KEY: 1,

   906                      'username': 'super',

   907                      'password': 'secret'}

   908         self.super_email_login = {

   909                      LOGIN_FORM_KEY: 1,

   910                      'username': 'super@example.com',

   911                      'password': 'secret'}

   912         self.super_email_bad_login = {

   913                       LOGIN_FORM_KEY: 1,

   914                       'username': 'super@example.com',

   915                       'password': 'notsecret'}

   916         self.adduser_login = {

   917                      LOGIN_FORM_KEY: 1,

   918                      'username': 'adduser',

   919                      'password': 'secret'}

   920         self.changeuser_login = {

   921                      LOGIN_FORM_KEY: 1,

   922                      'username': 'changeuser',

   923                      'password': 'secret'}

   924         self.deleteuser_login = {

   925                      LOGIN_FORM_KEY: 1,

   926                      'username': 'deleteuser',

   927                      'password': 'secret'}

   928         self.joepublic_login = {

   929                      LOGIN_FORM_KEY: 1,

   930                      'username': 'joepublic',

   931                      'password': 'secret'}

   932 

   933     def tearDown(self):

   934         self.client.logout()

   935 

   936     def test_secure_view_shows_login_if_not_logged_in(self):

   937         "Ensure that we see the login form"

   938         response = self.client.get('/test_admin/admin/secure-view/' )

   939         self.assertTemplateUsed(response, 'admin/login.html')

   940 

   941     def test_secure_view_login_successfully_redirects_to_original_url(self):

   942         request = self.client.get('/test_admin/admin/secure-view/')

   943         self.assertEqual(request.status_code, 200)

   944         query_string = 'the-answer=42'

   945         redirect_url = '/test_admin/admin/secure-view/?%s' % query_string

   946         new_next = {REDIRECT_FIELD_NAME: redirect_url}

   947         login = self.client.post('/test_admin/admin/secure-view/', dict(self.super_login, **new_next), QUERY_STRING=query_string)

   948         self.assertRedirects(login, redirect_url)

   949 

   950     def test_staff_member_required_decorator_works_as_per_admin_login(self):

   951         """

   952         Make sure only staff members can log in.

   953 

   954         Successful posts to the login page will redirect to the orignal url.

   955         Unsuccessfull attempts will continue to render the login page with

   956         a 200 status code.

   957         """

   958         # Super User

   959         request = self.client.get('/test_admin/admin/secure-view/')

   960         self.assertEqual(request.status_code, 200)

   961         login = self.client.post('/test_admin/admin/secure-view/', self.super_login)

   962         self.assertRedirects(login, '/test_admin/admin/secure-view/')

   963         self.assertFalse(login.context)

   964         self.client.get('/test_admin/admin/logout/')

   965         # make sure the view removes test cookie

   966         self.assertEqual(self.client.session.test_cookie_worked(), False)

   967 

   968         # Test if user enters e-mail address

   969         request = self.client.get('/test_admin/admin/secure-view/')

   970         self.assertEqual(request.status_code, 200)

   971         login = self.client.post('/test_admin/admin/secure-view/', self.super_email_login)

   972         self.assertContains(login, "Your e-mail address is not your username")

   973         # only correct passwords get a username hint

   974         login = self.client.post('/test_admin/admin/secure-view/', self.super_email_bad_login)

   975         self.assertContains(login, "Please enter a correct username and password")

   976         new_user = User(username='jondoe', password='secret', email='super@example.com')

   977         new_user.save()

   978         # check to ensure if there are multiple e-mail addresses a user doesn't get a 500

   979         login = self.client.post('/test_admin/admin/secure-view/', self.super_email_login)

   980         self.assertContains(login, "Please enter a correct username and password")

   981 

   982         # Add User

   983         request = self.client.get('/test_admin/admin/secure-view/')

   984         self.assertEqual(request.status_code, 200)

   985         login = self.client.post('/test_admin/admin/secure-view/', self.adduser_login)

   986         self.assertRedirects(login, '/test_admin/admin/secure-view/')

   987         self.assertFalse(login.context)

   988         self.client.get('/test_admin/admin/logout/')

   989 

   990         # Change User

   991         request = self.client.get('/test_admin/admin/secure-view/')

   992         self.assertEqual(request.status_code, 200)

   993         login = self.client.post('/test_admin/admin/secure-view/', self.changeuser_login)

   994         self.assertRedirects(login, '/test_admin/admin/secure-view/')

   995         self.assertFalse(login.context)

   996         self.client.get('/test_admin/admin/logout/')

   997 

   998         # Delete User

   999         request = self.client.get('/test_admin/admin/secure-view/')

  1000         self.assertEqual(request.status_code, 200)

  1001         login = self.client.post('/test_admin/admin/secure-view/', self.deleteuser_login)

  1002         self.assertRedirects(login, '/test_admin/admin/secure-view/')

  1003         self.assertFalse(login.context)

  1004         self.client.get('/test_admin/admin/logout/')

  1005 

  1006         # Regular User should not be able to login.

  1007         request = self.client.get('/test_admin/admin/secure-view/')

  1008         self.assertEqual(request.status_code, 200)

  1009         login = self.client.post('/test_admin/admin/secure-view/', self.joepublic_login)

  1010         self.assertEqual(login.status_code, 200)

  1011         # Login.context is a list of context dicts we just need to check the first one.

  1012         self.assert_(login.context[0].get('error_message'))

  1013 

  1014         # 8509 - if a normal user is already logged in, it is possible

  1015         # to change user into the superuser without error

  1016         login = self.client.login(username='joepublic', password='secret')

  1017         # Check and make sure that if user expires, data still persists

  1018         self.client.get('/test_admin/admin/secure-view/')

  1019         self.client.post('/test_admin/admin/secure-view/', self.super_login)

  1020         # make sure the view removes test cookie

  1021         self.assertEqual(self.client.session.test_cookie_worked(), False)

  1022 

  1023 class AdminViewUnicodeTest(TestCase):

  1024     fixtures = ['admin-views-unicode.xml']

  1025 

  1026     def setUp(self):

  1027         self.client.login(username='super', password='secret')

  1028 

  1029     def tearDown(self):

  1030         self.client.logout()

  1031 

  1032     def testUnicodeEdit(self):

  1033         """

  1034         A test to ensure that POST on edit_view handles non-ascii characters.

  1035         """

  1036         post_data = {

  1037             "name": u"Test lærdommer",

  1038             # inline data

  1039             "chapter_set-TOTAL_FORMS": u"6",

  1040             "chapter_set-INITIAL_FORMS": u"3",

  1041             "chapter_set-MAX_NUM_FORMS": u"0",

  1042             "chapter_set-0-id": u"1",

  1043             "chapter_set-0-title": u"Norske bostaver æøå skaper problemer",

  1044             "chapter_set-0-content": u"<p>Svært frustrerende med UnicodeDecodeError</p>",

  1045             "chapter_set-1-id": u"2",

  1046             "chapter_set-1-title": u"Kjærlighet.",

  1047             "chapter_set-1-content": u"<p>La kjærligheten til de lidende seire.</p>",

  1048             "chapter_set-2-id": u"3",

  1049             "chapter_set-2-title": u"Need a title.",

  1050             "chapter_set-2-content": u"<p>Newest content</p>",

  1051             "chapter_set-3-id": u"",

  1052             "chapter_set-3-title": u"",

  1053             "chapter_set-3-content": u"",

  1054             "chapter_set-4-id": u"",

  1055             "chapter_set-4-title": u"",

  1056             "chapter_set-4-content": u"",

  1057             "chapter_set-5-id": u"",

  1058             "chapter_set-5-title": u"",

  1059             "chapter_set-5-content": u"",

  1060         }

  1061 

  1062         response = self.client.post('/test_admin/admin/admin_views/book/1/', post_data)

  1063         self.assertEqual(response.status_code, 302) # redirect somewhere

  1064 

  1065     def testUnicodeDelete(self):

  1066         """

  1067         Ensure that the delete_view handles non-ascii characters

  1068         """

  1069         delete_dict = {'post': 'yes'}

  1070         response = self.client.get('/test_admin/admin/admin_views/book/1/delete/')

  1071         self.assertEqual(response.status_code, 200)

  1072         response = self.client.post('/test_admin/admin/admin_views/book/1/delete/', delete_dict)

  1073         self.assertRedirects(response, '/test_admin/admin/admin_views/book/')

  1074 

  1075 

  1076 class AdminViewListEditable(TestCase):

  1077     fixtures = ['admin-views-users.xml', 'admin-views-person.xml']

  1078 

  1079     def setUp(self):

  1080         self.client.login(username='super', password='secret')

  1081 

  1082     def tearDown(self):

  1083         self.client.logout()

  1084 

  1085     def test_inheritance(self):

  1086         Podcast.objects.create(name="This Week in Django",

  1087             release_date=datetime.date.today())

  1088         response = self.client.get('/test_admin/admin/admin_views/podcast/')

  1089         self.assertEqual(response.status_code, 200)

  1090 

  1091     def test_inheritance_2(self):

  1092         Vodcast.objects.create(name="This Week in Django", released=True)

  1093         response = self.client.get('/test_admin/admin/admin_views/vodcast/')

  1094         self.assertEqual(response.status_code, 200)

  1095 

  1096     def test_custom_pk(self):

  1097         Language.objects.create(iso='en', name='English', english_name='English')

  1098         response = self.client.get('/test_admin/admin/admin_views/language/')

  1099         self.assertEqual(response.status_code, 200)

  1100 

  1101     def test_changelist_input_html(self):

  1102         response = self.client.get('/test_admin/admin/admin_views/person/')

  1103         # 2 inputs per object(the field and the hidden id field) = 6

  1104         # 3 management hidden fields = 3

  1105         # 4 action inputs (3 regular checkboxes, 1 checkbox to select all)

  1106         # main form submit button = 1

  1107         # search field and search submit button = 2

  1108         # CSRF field = 1

  1109         # field to track 'select all' across paginated views = 1

  1110         # 6 + 3 + 4 + 1 + 2 + 1 + 1 = 18 inputs

  1111         self.assertEqual(response.content.count("<input"), 18)

  1112         # 1 select per object = 3 selects

  1113         self.assertEqual(response.content.count("<select"), 4)

  1114 

  1115     def test_post_messages(self):

  1116         # Ticket 12707: Saving inline editable should not show admin

  1117         # action warnings

  1118         data = {

  1119             "form-TOTAL_FORMS": "3",

  1120             "form-INITIAL_FORMS": "3",

  1121             "form-MAX_NUM_FORMS": "0",

  1122 

  1123             "form-0-gender": "1",

  1124             "form-0-id": "1",

  1125 

  1126             "form-1-gender": "2",

  1127             "form-1-id": "2",

  1128 

  1129             "form-2-alive": "checked",

  1130             "form-2-gender": "1",

  1131             "form-2-id": "3",

  1132 

  1133             "_save": "Save",

  1134         }

  1135         response = self.client.post('/test_admin/admin/admin_views/person/',

  1136                                     data, follow=True)