52 lines
2.4 KiB
Python
52 lines
2.4 KiB
Python
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
||
|
|
|
||
|
|
from requests.exceptions import HTTPError
|
||
|
|
|
||
|
|
from odoo import Command, http
|
||
|
|
from odoo.tests.common import tagged, HttpCase
|
||
|
|
from odoo.tools import file_open, mute_logger
|
||
|
|
|
||
|
|
|
||
|
|
@tagged("post_install", "-at_install")
|
||
|
|
class TestToggleUpload(HttpCase):
|
||
|
|
def test_upload_allowed(self):
|
||
|
|
self.authenticate(None, None)
|
||
|
|
channel = self.env["discuss.channel"].create({"name": "General", "group_public_id": None})
|
||
|
|
guest = self.env["mail.guest"].create({"name": "Guest"})
|
||
|
|
channel.write({"channel_member_ids": [Command.create({"guest_id": guest.id})]})
|
||
|
|
self.assertFalse(channel.allow_public_upload)
|
||
|
|
channel.write({'allow_public_upload': True})
|
||
|
|
with file_open("addons/web/__init__.py") as file:
|
||
|
|
response = self.url_open(
|
||
|
|
"/mail/attachment/upload",
|
||
|
|
{
|
||
|
|
"csrf_token": http.Request.csrf_token(self),
|
||
|
|
"thread_id": channel.id,
|
||
|
|
"thread_model": "discuss.channel",
|
||
|
|
},
|
||
|
|
files={"ufile": file},
|
||
|
|
headers={"Cookie": f"session_id={self.session.sid};{guest._cookie_name}={guest._format_auth_cookie()};"},
|
||
|
|
)
|
||
|
|
self.assertEqual(response.status_code, 200)
|
||
|
|
|
||
|
|
def test_upload_denied(self):
|
||
|
|
self.authenticate(None, None)
|
||
|
|
channel = self.env["discuss.channel"].create({"name": "General", "group_public_id": None})
|
||
|
|
guest = self.env["mail.guest"].create({"name": "Guest"})
|
||
|
|
channel.write({"channel_member_ids": [Command.create({"guest_id": guest.id})]})
|
||
|
|
self.assertFalse(channel.allow_public_upload)
|
||
|
|
with mute_logger("odoo.http"), file_open("addons/web/__init__.py") as file:
|
||
|
|
response = self.url_open(
|
||
|
|
"/mail/attachment/upload",
|
||
|
|
{
|
||
|
|
"csrf_token": http.Request.csrf_token(self),
|
||
|
|
"thread_id": channel.id,
|
||
|
|
"thread_model": "discuss.channel",
|
||
|
|
},
|
||
|
|
files={"ufile": file},
|
||
|
|
headers={"Cookie": f"session_id={self.session.sid};{guest._cookie_name}={guest._format_auth_cookie()};"},
|
||
|
|
)
|
||
|
|
with self.assertRaises(HTTPError) as error_catcher:
|
||
|
|
response.raise_for_status()
|
||
|
|
self.assertEqual(error_catcher.exception.response.status_code, 403)
|