|
|
# Redmine - project management software
|
|
|
# Copyright (C) 2006-2016 Jean-Philippe Lang
|
|
|
#
|
|
|
# This program is free software; you can redistribute it and/or
|
|
|
# modify it under the terms of the GNU General Public License
|
|
|
# as published by the Free Software Foundation; either version 2
|
|
|
# of the License, or (at your option) any later version.
|
|
|
#
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
# GNU General Public License for more details.
|
|
|
#
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
# along with this program; if not, write to the Free Software
|
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
|
|
require File.expand_path('../../test_helper', __FILE__)
|
|
|
|
|
|
class MyControllerTest < Redmine::ControllerTest
|
|
|
fixtures :users, :email_addresses, :user_preferences, :roles, :projects, :members, :member_roles,
|
|
|
:issues, :issue_statuses, :trackers, :enumerations, :custom_fields, :auth_sources
|
|
|
|
|
|
def setup
|
|
|
@request.session[:user_id] = 2
|
|
|
end
|
|
|
|
|
|
def test_index
|
|
|
get :index
|
|
|
assert_response :success
|
|
|
assert_select 'h2', 'My page'
|
|
|
end
|
|
|
|
|
|
def test_page
|
|
|
get :page
|
|
|
assert_response :success
|
|
|
assert_select 'h2', 'My page'
|
|
|
end
|
|
|
|
|
|
def test_page_with_timelog_block
|
|
|
preferences = User.find(2).pref
|
|
|
preferences[:my_page_layout] = {'top' => ['timelog']}
|
|
|
preferences.save!
|
|
|
TimeEntry.create!(:user => User.find(2), :spent_on => Date.yesterday, :issue_id => 1, :hours => 2.5, :activity_id => 10)
|
|
|
|
|
|
get :page
|
|
|
assert_response :success
|
|
|
assert_select 'tr.time-entry' do
|
|
|
assert_select 'td.subject a[href="/issues/1"]'
|
|
|
assert_select 'td.hours', :text => '2.50'
|
|
|
end
|
|
|
end
|
|
|
|
|
|
def test_page_with_all_blocks
|
|
|
blocks = Redmine::MyPage.blocks.keys
|
|
|
preferences = User.find(2).pref
|
|
|
preferences[:my_page_layout] = {'top' => blocks}
|
|
|
preferences.save!
|
|
|
|
|
|
get :page
|
|
|
assert_response :success
|
|
|
assert_select 'div.mypage-box', blocks.size
|
|
|
end
|
|
|
|
|
|
def test_my_account_should_show_editable_custom_fields
|
|
|
get :account
|
|
|
assert_response :success
|
|
|
assert_select 'input[name=?]', 'user[custom_field_values][4]'
|
|
|
end
|
|
|
|
|
|
def test_my_account_should_not_show_non_editable_custom_fields
|
|
|
UserCustomField.find(4).update_attribute :editable, false
|
|
|
|
|
|
get :account
|
|
|
assert_response :success
|
|
|
assert_select 'input[name=?]', 'user[custom_field_values][4]', 0
|
|
|
end
|
|
|
|
|
|
def test_my_account_should_show_language_select
|
|
|
get :account
|
|
|
assert_response :success
|
|
|
assert_select 'select[name=?]', 'user[language]'
|
|
|
end
|
|
|
|
|
|
def test_my_account_should_not_show_language_select_with_force_default_language_for_loggedin
|
|
|
with_settings :force_default_language_for_loggedin => '1' do
|
|
|
get :account
|
|
|
assert_response :success
|
|
|
assert_select 'select[name=?]', 'user[language]', 0
|
|
|
end
|
|
|
end
|
|
|
|
|
|
def test_update_account
|
|
|
post :account,
|
|
|
:user => {
|
|
|
:firstname => "Joe",
|
|
|
:login => "root",
|
|
|
:admin => 1,
|
|
|
:group_ids => ['10'],
|
|
|
:custom_field_values => {"4" => "0100562500"}
|
|
|
}
|
|
|
|
|
|
assert_redirected_to '/my/account'
|
|
|
user = User.find(2)
|
|
|
assert_equal "Joe", user.firstname
|
|
|
assert_equal "jsmith", user.login
|
|
|
assert_equal "0100562500", user.custom_value_for(4).value
|
|
|
# ignored
|
|
|
assert !user.admin?
|
|
|
assert user.groups.empty?
|
|
|
end
|
|
|
|
|
|
def test_update_account_should_send_security_notification
|
|
|
ActionMailer::Base.deliveries.clear
|
|
|
post :account,
|
|
|
:user => {
|
|
|
:mail => 'foobar@example.com'
|
|
|
}
|
|
|
|
|
|
assert_not_nil (mail = ActionMailer::Base.deliveries.last)
|
|
|
assert_mail_body_match '0.0.0.0', mail
|
|
|
assert_mail_body_match I18n.t(:mail_body_security_notification_change_to, field: I18n.t(:field_mail), value: 'foobar@example.com'), mail
|
|
|
assert_select_email do
|
|
|
assert_select 'a[href^=?]', 'http://localhost:3000/my/account', :text => 'My account'
|
|
|
end
|
|
|
# The old email address should be notified about the change for security purposes
|
|
|
assert [mail.bcc, mail.cc].flatten.include?(User.find(2).mail)
|
|
|
assert [mail.bcc, mail.cc].flatten.include?('foobar@example.com')
|
|
|
end
|
|
|
|
|
|
def test_my_account_should_show_destroy_link
|
|
|
get :account
|
|
|
assert_select 'a[href="/my/account/destroy"]'
|
|
|
end
|
|
|
|
|
|
def test_get_destroy_should_display_the_destroy_confirmation
|
|
|
get :destroy
|
|
|
assert_response :success
|
|
|
assert_select 'form[action="/my/account/destroy"]' do
|
|
|
assert_select 'input[name=confirm]'
|
|
|
end
|
|
|
end
|
|
|
|
|
|
def test_post_destroy_without_confirmation_should_not_destroy_account
|
|
|
assert_no_difference 'User.count' do
|
|
|
post :destroy
|
|
|
end
|
|
|
assert_response :success
|
|
|
end
|
|
|
|
|
|
def test_post_destroy_without_confirmation_should_destroy_account
|
|
|
assert_difference 'User.count', -1 do
|
|
|
post :destroy, :confirm => '1'
|
|
|
end
|
|
|
assert_redirected_to '/'
|
|
|
assert_match /deleted/i, flash[:notice]
|
|
|
end
|
|
|
|
|
|
def test_post_destroy_with_unsubscribe_not_allowed_should_not_destroy_account
|
|
|
User.any_instance.stubs(:own_account_deletable?).returns(false)
|
|
|
|
|
|
assert_no_difference 'User.count' do
|
|
|
post :destroy, :confirm => '1'
|
|
|
end
|
|
|
assert_redirected_to '/my/account'
|
|
|
end
|
|
|
|
|
|
def test_change_password
|
|
|
get :password
|
|
|
assert_response :success
|
|
|
assert_select 'input[type=password][name=password]'
|
|
|
assert_select 'input[type=password][name=new_password]'
|
|
|
assert_select 'input[type=password][name=new_password_confirmation]'
|
|
|
end
|
|
|
|
|
|
def test_update_password
|
|
|
post :password, :password => 'jsmith',
|
|
|
:new_password => 'secret123',
|
|
|
:new_password_confirmation => 'secret123'
|
|
|
assert_redirected_to '/my/account'
|
|
|
assert User.try_to_login('jsmith', 'secret123')
|
|
|
end
|
|
|
|
|
|
def test_update_password_with_non_matching_confirmation
|
|
|
post :password, :password => 'jsmith',
|
|
|
:new_password => 'secret123',
|
|
|
:new_password_confirmation => 'secret1234'
|
|
|
assert_response :success
|
|
|
assert_select_error /Password doesn.*t match confirmation/
|
|
|
assert User.try_to_login('jsmith', 'jsmith')
|
|
|
end
|
|
|
|
|
|
def test_update_password_with_wrong_password
|
|
|
# wrong password
|
|
|
post :password, :password => 'wrongpassword',
|
|
|
:new_password => 'secret123',
|
|
|
:new_password_confirmation => 'secret123'
|
|
|
assert_response :success
|
|
|
assert_equal 'Wrong password', flash[:error]
|
|
|
assert User.try_to_login('jsmith', 'jsmith')
|
|
|
end
|
|
|
|
|
|
def test_change_password_should_redirect_if_user_cannot_change_its_password
|
|
|
User.find(2).update_attribute(:auth_source_id, 1)
|
|
|
|
|
|
get :password
|
|
|
assert_not_nil flash[:error]
|
|
|
assert_redirected_to '/my/account'
|
|
|
end
|
|
|
|
|
|
def test_update_password_should_send_security_notification
|
|
|
ActionMailer::Base.deliveries.clear
|
|
|
post :password, :password => 'jsmith',
|
|
|
:new_password => 'secret123',
|
|
|
:new_password_confirmation => 'secret123'
|
|
|
|
|
|
assert_not_nil (mail = ActionMailer::Base.deliveries.last)
|
|
|
assert_mail_body_no_match 'secret123', mail # just to be sure: pw should never be sent!
|
|
|
assert_select_email do
|
|
|
assert_select 'a[href^=?]', 'http://localhost:3000/my/password', :text => 'Change password'
|
|
|
end
|
|
|
end
|
|
|
|
|
|
def test_update_page_with_blank_preferences
|
|
|
user = User.generate!(:language => 'en')
|
|
|
@request.session[:user_id] = user.id
|
|
|
|
|
|
xhr :post, :update_page, :settings => {'timelog' => {'days' => '14'}}
|
|
|
assert_response :success
|
|
|
assert_include '$("#block-timelog").html(', response.body
|
|
|
assert_include '14 days', response.body
|
|
|
|
|
|
assert_equal({:days => "14"}, user.reload.pref.my_page_settings('timelog'))
|
|
|
end
|
|
|
|
|
|
def test_page_layout
|
|
|
get :page_layout
|
|
|
assert_response :success
|
|
|
end
|
|
|
|
|
|
def test_add_block
|
|
|
post :add_block, :block => 'issuesreportedbyme'
|
|
|
assert_redirected_to '/my/page_layout'
|
|
|
assert User.find(2).pref[:my_page_layout]['top'].include?('issuesreportedbyme')
|
|
|
end
|
|
|
|
|
|
def test_add_invalid_block_should_redirect
|
|
|
post :add_block, :block => 'invalid'
|
|
|
assert_redirected_to '/my/page_layout'
|
|
|
end
|
|
|
|
|
|
def test_remove_block
|
|
|
post :remove_block, :block => 'issuesassignedtome'
|
|
|
assert_redirected_to '/my/page_layout'
|
|
|
assert !User.find(2).pref[:my_page_layout].values.flatten.include?('issuesassignedtome')
|
|
|
end
|
|
|
|
|
|
def test_order_blocks
|
|
|
xhr :post, :order_blocks, :group => 'left', 'blocks' => ['documents', 'calendar', 'latestnews']
|
|
|
assert_response :success
|
|
|
assert_equal ['documents', 'calendar', 'latestnews'], User.find(2).pref[:my_page_layout]['left']
|
|
|
end
|
|
|
|
|
|
def test_reset_rss_key_with_existing_key
|
|
|
@previous_token_value = User.find(2).rss_key # Will generate one if it's missing
|
|
|
post :reset_rss_key
|
|
|
|
|
|
assert_not_equal @previous_token_value, User.find(2).rss_key
|
|
|
assert User.find(2).rss_token
|
|
|
assert_match /reset/, flash[:notice]
|
|
|
assert_redirected_to '/my/account'
|
|
|
end
|
|
|
|
|
|
def test_reset_rss_key_without_existing_key
|
|
|
assert_nil User.find(2).rss_token
|
|
|
post :reset_rss_key
|
|
|
|
|
|
assert User.find(2).rss_token
|
|
|
assert_match /reset/, flash[:notice]
|
|
|
assert_redirected_to '/my/account'
|
|
|
end
|
|
|
|
|
|
def test_show_api_key
|
|
|
get :show_api_key
|
|
|
assert_response :success
|
|
|
assert_select 'pre', User.find(2).api_key
|
|
|
end
|
|
|
|
|
|
def test_reset_api_key_with_existing_key
|
|
|
@previous_token_value = User.find(2).api_key # Will generate one if it's missing
|
|
|
post :reset_api_key
|
|
|
|
|
|
assert_not_equal @previous_token_value, User.find(2).api_key
|
|
|
assert User.find(2).api_token
|
|
|
assert_match /reset/, flash[:notice]
|
|
|
assert_redirected_to '/my/account'
|
|
|
end
|
|
|
|
|
|
def test_reset_api_key_without_existing_key
|
|
|
assert_nil User.find(2).api_token
|
|
|
post :reset_api_key
|
|
|
|
|
|
assert User.find(2).api_token
|
|
|
assert_match /reset/, flash[:notice]
|
|
|
assert_redirected_to '/my/account'
|
|
|
end
|
|
|
end
|
|
|
|
