# coding: utf-8

import re

import datetime

from django.conf import settings

from django.core.exceptions import SuspiciousOperation

from django.core.files import temp as tempfile

# Register auth models with the admin.

from django.contrib.auth import REDIRECT_FIELD_NAME, admin

from django.contrib.auth.models import User, Permission, UNUSABLE_PASSWORD

from django.contrib.contenttypes.models import ContentType

from django.contrib.admin.models import LogEntry, DELETION

from django.contrib.admin.sites import LOGIN_FORM_KEY

from django.contrib.admin.util import quote

from django.contrib.admin.helpers import ACTION_CHECKBOX_NAME

from django.forms.util import ErrorList

from django.test import TestCase

from django.utils import formats

from django.utils.cache import get_max_age

from django.utils.encoding import iri_to_uri

from django.utils.html import escape

from django.utils.translation import activate, deactivate

import django.template.context

# local test models

from models import Article, BarAccount, CustomArticle, EmptyModel, \

    FooAccount, Gallery, ModelWithStringPrimaryKey, \

    Person, Persona, Picture, Podcast, Section, Subscriber, Vodcast, \

    Language, Collector, Widget, Grommet, DooHickey, FancyDoodad, Whatsit, \

    Category, Post, Plot, FunkyTag

class AdminViewBasicTest(TestCase):

    fixtures = ['admin-views-users.xml', 'admin-views-colors.xml', 'admin-views-fabrics.xml']

    # Store the bit of the URL where the admin is registered as a class

    # variable. That way we can test a second AdminSite just by subclassing

    # this test case and changing urlbit.

    urlbit = 'admin'

    def setUp(self):

        self.old_language_code = settings.LANGUAGE_CODE

        self.client.login(username='super', password='secret')

    def tearDown(self):

        settings.LANGUAGE_CODE = self.old_language_code

        self.client.logout()

    def testTrailingSlashRequired(self):

        """

        If you leave off the trailing slash, app should redirect and add it.

        """

        request = self.client.get('/test_admin/%s/admin_views/article/add' % self.urlbit)

        self.assertRedirects(request,

            '/test_admin/%s/admin_views/article/add/' % self.urlbit, status_code=301

        )

    def testBasicAddGet(self):

        """

        A smoke test to ensure GET on the add_view works.

        """

        response = self.client.get('/test_admin/%s/admin_views/section/add/' % self.urlbit)

        self.assertEqual(response.status_code, 200)

    def testAddWithGETArgs(self):

        response = self.client.get('/test_admin/%s/admin_views/section/add/' % self.urlbit, {'name': 'My Section'})

        self.assertEqual(response.status_code, 200)

        self.assertTrue(

            'value="My Section"' in response.content,

            "Couldn't find an input with the right value in the response."

        )

    def testBasicEditGet(self):

        """

        A smoke test to ensure GET on the change_view works.

        """

        response = self.client.get('/test_admin/%s/admin_views/section/1/' % self.urlbit)

        self.assertEqual(response.status_code, 200)

    def testBasicEditGetStringPK(self):

        """

        A smoke test to ensure GET on the change_view works (returns an HTTP

        404 error, see #11191) when passing a string as the PK argument for a

        model with an integer PK field.

        """

        response = self.client.get('/test_admin/%s/admin_views/section/abc/' % self.urlbit)

        self.assertEqual(response.status_code, 404)

    def testBasicAddPost(self):

        """

        A smoke test to ensure POST on add_view works.

        """

        post_data = {

            "name": u"Another Section",

            # inline data

            "article_set-TOTAL_FORMS": u"3",

            "article_set-INITIAL_FORMS": u"0",

            "article_set-MAX_NUM_FORMS": u"0",

        }

        response = self.client.post('/test_admin/%s/admin_views/section/add/' % self.urlbit, post_data)

        self.assertEqual(response.status_code, 302) # redirect somewhere

    # Post data for edit inline

    inline_post_data = {

        "name": u"Test section",

        # inline data

        "article_set-TOTAL_FORMS": u"6",

        "article_set-INITIAL_FORMS": u"3",

        "article_set-MAX_NUM_FORMS": u"0",

        "article_set-0-id": u"1",

        # there is no title in database, give one here or formset will fail.

        "article_set-0-title": u"Norske bostaver æøå skaper problemer",

        "article_set-0-content": u"<p>Middle content</p>",

        "article_set-0-date_0": u"2008-03-18",

        "article_set-0-date_1": u"11:54:58",

        "article_set-0-section": u"1",

        "article_set-1-id": u"2",

        "article_set-1-title": u"Need a title.",

        "article_set-1-content": u"<p>Oldest content</p>",

        "article_set-1-date_0": u"2000-03-18",

        "article_set-1-date_1": u"11:54:58",

        "article_set-2-id": u"3",

        "article_set-2-title": u"Need a title.",

        "article_set-2-content": u"<p>Newest content</p>",

        "article_set-2-date_0": u"2009-03-18",

        "article_set-2-date_1": u"11:54:58",

        "article_set-3-id": u"",

        "article_set-3-title": u"",

        "article_set-3-content": u"",

        "article_set-3-date_0": u"",

        "article_set-3-date_1": u"",

        "article_set-4-id": u"",

        "article_set-4-title": u"",

        "article_set-4-content": u"",

        "article_set-4-date_0": u"",

        "article_set-4-date_1": u"",

        "article_set-5-id": u"",

        "article_set-5-title": u"",

        "article_set-5-content": u"",

        "article_set-5-date_0": u"",

        "article_set-5-date_1": u"",

    }

    def testBasicEditPost(self):

        """

        A smoke test to ensure POST on edit_view works.

        """

        response = self.client.post('/test_admin/%s/admin_views/section/1/' % self.urlbit, self.inline_post_data)

        self.assertEqual(response.status_code, 302) # redirect somewhere

    def testEditSaveAs(self):

        """

        Test "save as".

        """

        post_data = self.inline_post_data.copy()

        post_data.update({

            '_saveasnew': u'Save+as+new',

            "article_set-1-section": u"1",

            "article_set-2-section": u"1",

            "article_set-3-section": u"1",

            "article_set-4-section": u"1",

            "article_set-5-section": u"1",

        })

        response = self.client.post('/test_admin/%s/admin_views/section/1/' % self.urlbit, post_data)

        self.assertEqual(response.status_code, 302) # redirect somewhere

    def testChangeListSortingCallable(self):

        """

        Ensure we can sort on a list_display field that is a callable

        (column 2 is callable_year in ArticleAdmin)

        """

        response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'ot': 'asc', 'o': 2})

        self.assertEqual(response.status_code, 200)

        self.assertTrue(

            response.content.index('Oldest content') < response.content.index('Middle content') and

            response.content.index('Middle content') < response.content.index('Newest content'),

            "Results of sorting on callable are out of order."

        )

    def testChangeListSortingModel(self):

        """

        Ensure we can sort on a list_display field that is a Model method

        (colunn 3 is 'model_year' in ArticleAdmin)

        """

        response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'ot': 'dsc', 'o': 3})

        self.assertEqual(response.status_code, 200)

        self.assertTrue(

            response.content.index('Newest content') < response.content.index('Middle content') and

            response.content.index('Middle content') < response.content.index('Oldest content'),

            "Results of sorting on Model method are out of order."

        )

    def testChangeListSortingModelAdmin(self):

        """

        Ensure we can sort on a list_display field that is a ModelAdmin method

        (colunn 4 is 'modeladmin_year' in ArticleAdmin)

        """

        response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'ot': 'asc', 'o': 4})

        self.assertEqual(response.status_code, 200)

        self.assertTrue(

            response.content.index('Oldest content') < response.content.index('Middle content') and

            response.content.index('Middle content') < response.content.index('Newest content'),

            "Results of sorting on ModelAdmin method are out of order."

        )

    def testLimitedFilter(self):

        """Ensure admin changelist filters do not contain objects excluded via limit_choices_to."""

        response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit)

        self.assertEqual(response.status_code, 200)

        self.assertTrue(

            '<div id="changelist-filter">' in response.content,

            "Expected filter not found in changelist view."

        )

        self.assertFalse(

            '<a href="?color__id__exact=3">Blue</a>' in response.content,

            "Changelist filter not correctly limited by limit_choices_to."

        )

    def testIncorrectLookupParameters(self):

        """Ensure incorrect lookup parameters are handled gracefully."""

        response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'notarealfield': '5'})

        self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)

        response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'color__id__exact': 'StringNotInteger!'})

        self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)

    def testIsNullLookups(self):

        """Ensure is_null is handled correctly."""

        Article.objects.create(title="I Could Go Anywhere", content="Versatile", date=datetime.datetime.now())

        response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit)

        self.assertTrue('4 articles' in response.content, '"4 articles" missing from response')

        response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': 'false'})

        self.assertTrue('3 articles' in response.content, '"3 articles" missing from response')

        response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': 'true'})

        self.assertTrue('1 article' in response.content, '"1 article" missing from response')

    def testLogoutAndPasswordChangeURLs(self):

        response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit)

        self.assertFalse('<a href="/test_admin/%s/logout/">' % self.urlbit not in response.content)

        self.assertFalse('<a href="/test_admin/%s/password_change/">' % self.urlbit not in response.content)

    def testNamedGroupFieldChoicesChangeList(self):

        """

        Ensures the admin changelist shows correct values in the relevant column

        for rows corresponding to instances of a model in which a named group

        has been used in the choices option of a field.

        """

        response = self.client.get('/test_admin/%s/admin_views/fabric/' % self.urlbit)

        self.assertEqual(response.status_code, 200)

        self.assertTrue(

            '<a href="1/">Horizontal</a>' in response.content and

            '<a href="2/">Vertical</a>' in response.content,

            "Changelist table isn't showing the right human-readable values set by a model field 'choices' option named group."

        )

    def testNamedGroupFieldChoicesFilter(self):

        """

        Ensures the filter UI shows correctly when at least one named group has

        been used in the choices option of a model field.

        """

        response = self.client.get('/test_admin/%s/admin_views/fabric/' % self.urlbit)

        self.assertEqual(response.status_code, 200)

        self.assertTrue(

            '<div id="changelist-filter">' in response.content,

            "Expected filter not found in changelist view."

        )

        self.assertTrue(

            '<a href="?surface__exact=x">Horizontal</a>' in response.content and

            '<a href="?surface__exact=y">Vertical</a>' in response.content,

            "Changelist filter isn't showing options contained inside a model field 'choices' option named group."

        )

    def testChangeListNullBooleanDisplay(self):

        Post.objects.create(public=None)

        # This hard-codes the URl because it'll fail if it runs

        # against the 'admin2' custom admin (which doesn't have the

        # Post model).

        response = self.client.get("/test_admin/admin/admin_views/post/")

        self.assertTrue('icon-unknown.gif' in response.content)

    def testI18NLanguageNonEnglishDefault(self):

        """

        Check if the Javascript i18n view returns an empty language catalog

        if the default language is non-English but the selected language

        is English. See #13388 and #3594 for more details.

        """

        settings.LANGUAGE_CODE = 'fr'

        activate('en-us')

        response = self.client.get('/test_admin/admin/jsi18n/')

        self.assertNotContains(response, 'Choisir une heure')

        deactivate()

    def testI18NLanguageNonEnglishFallback(self):

        """

        Makes sure that the fallback language is still working properly

        in cases where the selected language cannot be found.

        """

        settings.LANGUAGE_CODE = 'fr'

        activate('none')

        response = self.client.get('/test_admin/admin/jsi18n/')

        self.assertContains(response, 'Choisir une heure')

        deactivate()

    def test_disallowed_filtering(self):

        self.assertRaises(SuspiciousOperation,

            self.client.get, "/test_admin/admin/admin_views/album/?owner__email__startswith=fuzzy"

        )

class SaveAsTests(TestCase):

    fixtures = ['admin-views-users.xml','admin-views-person.xml']

    def setUp(self):

        self.client.login(username='super', password='secret')

    def tearDown(self):

        self.client.logout()

    def test_save_as_duplication(self):

        """Ensure save as actually creates a new person"""

        post_data = {'_saveasnew':'', 'name':'John M', 'gender':1}

        response = self.client.post('/test_admin/admin/admin_views/person/1/', post_data)

        self.assertEqual(len(Person.objects.filter(name='John M')), 1)

        self.assertEqual(len(Person.objects.filter(id=1)), 1)

    def test_save_as_display(self):

        """

        Ensure that 'save as' is displayed when activated and after submitting

        invalid data aside save_as_new will not show us a form to overwrite the

        initial model.

        """

        response = self.client.get('/test_admin/admin/admin_views/person/1/')

        self.assert_(response.context['save_as'])

        post_data = {'_saveasnew':'', 'name':'John M', 'gender':3, 'alive':'checked'}

        response = self.client.post('/test_admin/admin/admin_views/person/1/', post_data)

        self.assertEqual(response.context['form_url'], '../add/')

class CustomModelAdminTest(AdminViewBasicTest):

    urlbit = "admin2"

    def testCustomAdminSiteLoginTemplate(self):

        self.client.logout()

        request = self.client.get('/test_admin/admin2/')

        self.assertTemplateUsed(request, 'custom_admin/login.html')

        self.assert_('Hello from a custom login template' in request.content)

    def testCustomAdminSiteLogoutTemplate(self):

        request = self.client.get('/test_admin/admin2/logout/')

        self.assertTemplateUsed(request, 'custom_admin/logout.html')

        self.assert_('Hello from a custom logout template' in request.content)

    def testCustomAdminSiteIndexViewAndTemplate(self):

        request = self.client.get('/test_admin/admin2/')

        self.assertTemplateUsed(request, 'custom_admin/index.html')

        self.assert_('Hello from a custom index template *bar*' in request.content)

    def testCustomAdminSitePasswordChangeTemplate(self):

        request = self.client.get('/test_admin/admin2/password_change/')

        self.assertTemplateUsed(request, 'custom_admin/password_change_form.html')

        self.assert_('Hello from a custom password change form template' in request.content)

    def testCustomAdminSitePasswordChangeDoneTemplate(self):

        request = self.client.get('/test_admin/admin2/password_change/done/')

        self.assertTemplateUsed(request, 'custom_admin/password_change_done.html')

        self.assert_('Hello from a custom password change done template' in request.content)

    def testCustomAdminSiteView(self):

        self.client.login(username='super', password='secret')

        response = self.client.get('/test_admin/%s/my_view/' % self.urlbit)

        self.assert_(response.content == "Django is a magical pony!", response.content)

def get_perm(Model, perm):

    """Return the permission object, for the Model"""

    ct = ContentType.objects.get_for_model(Model)

    return Permission.objects.get(content_type=ct, codename=perm)

class AdminViewPermissionsTest(TestCase):

    """Tests for Admin Views Permissions."""

    fixtures = ['admin-views-users.xml']

    def setUp(self):

        """Test setup."""

        # Setup permissions, for our users who can add, change, and delete.

        # We can't put this into the fixture, because the content type id

        # and the permission id could be different on each run of the test.

        opts = Article._meta

        # User who can add Articles

        add_user = User.objects.get(username='adduser')

        add_user.user_permissions.add(get_perm(Article,

            opts.get_add_permission()))

        # User who can change Articles

        change_user = User.objects.get(username='changeuser')

        change_user.user_permissions.add(get_perm(Article,

            opts.get_change_permission()))

        # User who can delete Articles

        delete_user = User.objects.get(username='deleteuser')

        delete_user.user_permissions.add(get_perm(Article,

            opts.get_delete_permission()))

        delete_user.user_permissions.add(get_perm(Section,

            Section._meta.get_delete_permission()))

        # login POST dicts

        self.super_login = {

                     LOGIN_FORM_KEY: 1,

                     'username': 'super',

                     'password': 'secret'}

        self.super_email_login = {

                     LOGIN_FORM_KEY: 1,

                     'username': 'super@example.com',

                     'password': 'secret'}

        self.super_email_bad_login = {

                      LOGIN_FORM_KEY: 1,

                      'username': 'super@example.com',

                      'password': 'notsecret'}

        self.adduser_login = {

                     LOGIN_FORM_KEY: 1,

                     'username': 'adduser',

                     'password': 'secret'}

        self.changeuser_login = {

                     LOGIN_FORM_KEY: 1,

                     'username': 'changeuser',

                     'password': 'secret'}

        self.deleteuser_login = {

                     LOGIN_FORM_KEY: 1,

                     'username': 'deleteuser',

                     'password': 'secret'}

        self.joepublic_login = {

                     LOGIN_FORM_KEY: 1,

                     'username': 'joepublic',

                     'password': 'secret'}

        self.no_username_login = {

                     LOGIN_FORM_KEY: 1,

                     'password': 'secret'}

    def testLogin(self):

        """

        Make sure only staff members can log in.

        Successful posts to the login page will redirect to the orignal url.

        Unsuccessfull attempts will continue to render the login page with

        a 200 status code.

        """

        # Super User

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        login = self.client.post('/test_admin/admin/', self.super_login)

        self.assertRedirects(login, '/test_admin/admin/')

        self.assertFalse(login.context)

        self.client.get('/test_admin/admin/logout/')

        # Test if user enters e-mail address

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        login = self.client.post('/test_admin/admin/', self.super_email_login)

        self.assertContains(login, "Your e-mail address is not your username")

        # only correct passwords get a username hint

        login = self.client.post('/test_admin/admin/', self.super_email_bad_login)

        self.assertContains(login, "Please enter a correct username and password")

        new_user = User(username='jondoe', password='secret', email='super@example.com')

        new_user.save()

        # check to ensure if there are multiple e-mail addresses a user doesn't get a 500

        login = self.client.post('/test_admin/admin/', self.super_email_login)

        self.assertContains(login, "Please enter a correct username and password")

        # Add User

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        login = self.client.post('/test_admin/admin/', self.adduser_login)

        self.assertRedirects(login, '/test_admin/admin/')

        self.assertFalse(login.context)

        self.client.get('/test_admin/admin/logout/')

        # Change User

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        login = self.client.post('/test_admin/admin/', self.changeuser_login)

        self.assertRedirects(login, '/test_admin/admin/')

        self.assertFalse(login.context)

        self.client.get('/test_admin/admin/logout/')

        # Delete User

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        login = self.client.post('/test_admin/admin/', self.deleteuser_login)

        self.assertRedirects(login, '/test_admin/admin/')

        self.assertFalse(login.context)

        self.client.get('/test_admin/admin/logout/')

        # Regular User should not be able to login.

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        login = self.client.post('/test_admin/admin/', self.joepublic_login)

        self.assertEqual(login.status_code, 200)

        self.assertContains(login, "Please enter a correct username and password.")

        # Requests without username should not return 500 errors.

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        login = self.client.post('/test_admin/admin/', self.no_username_login)

        self.assertEqual(login.status_code, 200)

        form = login.context[0].get('form')

        self.assert_(login.context[0].get('error_message'))

    def testLoginSuccessfullyRedirectsToOriginalUrl(self):

        request = self.client.get('/test_admin/admin/')

        self.assertEqual(request.status_code, 200)

        query_string = 'the-answer=42'

        redirect_url = '/test_admin/admin/?%s' % query_string

        new_next = {REDIRECT_FIELD_NAME: redirect_url}

        login = self.client.post('/test_admin/admin/', dict(self.super_login, **new_next), QUERY_STRING=query_string)

        self.assertRedirects(login, redirect_url)

    def testAddView(self):

        """Test add view restricts access and actually adds items."""

        add_dict = {'title' : 'Døm ikke',

                    'content': '<p>great article</p>',

                    'date_0': '2008-03-18', 'date_1': '10:54:39',

                    'section': 1}

        # Change User should not have access to add articles

        self.client.get('/test_admin/admin/')

        self.client.post('/test_admin/admin/', self.changeuser_login)

        # make sure the view removes test cookie