tests.py 215 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072307330743075307630773078307930803081308230833084308530863087308830893090309130923093309430953096309730983099310031013102310331043105310631073108310931103111311231133114311531163117311831193120312131223123312431253126312731283129313031313132313331343135313631373138313931403141314231433144314531463147314831493150315131523153315431553156315731583159316031613162316331643165316631673168316931703171317231733174317531763177317831793180318131823183318431853186318731883189319031913192319331943195319631973198319932003201320232033204320532063207320832093210321132123213321432153216321732183219322032213222322332243225322632273228322932303231323232333234323532363237323832393240324132423243324432453246324732483249325032513252325332543255325632573258325932603261326232633264326532663267326832693270327132723273327432753276327732783279328032813282328332843285328632873288328932903291329232933294329532963297329832993300330133023303330433053306330733083309331033113312331333143315331633173318331933203321332233233324332533263327332833293330333133323333333433353336333733383339334033413342334333443345334633473348334933503351335233533354335533563357335833593360336133623363336433653366336733683369337033713372337333743375337633773378337933803381338233833384338533863387338833893390339133923393339433953396339733983399340034013402340334043405340634073408340934103411341234133414341534163417341834193420342134223423342434253426342734283429343034313432343334343435343634373438343934403441344234433444344534463447344834493450345134523453345434553456345734583459346034613462346334643465346634673468346934703471347234733474347534763477347834793480348134823483348434853486348734883489349034913492349334943495349634973498349935003501350235033504350535063507350835093510351135123513351435153516351735183519352035213522352335243525352635273528352935303531353235333534353535363537353835393540354135423543354435453546354735483549355035513552355335543555355635573558355935603561356235633564356535663567356835693570357135723573357435753576357735783579358035813582358335843585358635873588358935903591359235933594359535963597359835993600360136023603360436053606360736083609361036113612361336143615361636173618361936203621362236233624362536263627362836293630363136323633363436353636363736383639364036413642364336443645364636473648364936503651365236533654365536563657365836593660366136623663366436653666366736683669367036713672367336743675367636773678367936803681368236833684368536863687368836893690369136923693369436953696369736983699370037013702370337043705370637073708370937103711371237133714371537163717371837193720372137223723372437253726372737283729373037313732373337343735373637373738373937403741374237433744374537463747374837493750375137523753375437553756375737583759376037613762376337643765376637673768376937703771377237733774377537763777377837793780378137823783378437853786378737883789379037913792379337943795379637973798379938003801380238033804380538063807380838093810381138123813381438153816381738183819382038213822382338243825382638273828382938303831383238333834383538363837383838393840384138423843384438453846384738483849385038513852385338543855385638573858385938603861386238633864386538663867386838693870387138723873387438753876387738783879388038813882388338843885388638873888388938903891389238933894389538963897389838993900390139023903390439053906390739083909391039113912391339143915391639173918391939203921392239233924392539263927392839293930393139323933393439353936393739383939394039413942394339443945394639473948394939503951395239533954395539563957395839593960396139623963396439653966396739683969397039713972397339743975397639773978397939803981398239833984398539863987398839893990399139923993399439953996399739983999400040014002400340044005400640074008400940104011401240134014401540164017401840194020402140224023402440254026402740284029403040314032403340344035403640374038403940404041404240434044404540464047404840494050405140524053405440554056405740584059406040614062406340644065406640674068406940704071407240734074407540764077407840794080408140824083408440854086408740884089409040914092409340944095409640974098409941004101410241034104410541064107410841094110411141124113411441154116411741184119412041214122412341244125412641274128412941304131413241334134413541364137413841394140414141424143414441454146414741484149415041514152415341544155415641574158415941604161416241634164416541664167416841694170417141724173417441754176417741784179418041814182418341844185418641874188418941904191419241934194419541964197419841994200420142024203420442054206420742084209421042114212421342144215421642174218421942204221422242234224422542264227422842294230423142324233423442354236423742384239424042414242424342444245424642474248424942504251425242534254425542564257425842594260426142624263426442654266426742684269427042714272427342744275427642774278427942804281428242834284428542864287428842894290429142924293429442954296429742984299430043014302430343044305430643074308430943104311431243134314431543164317431843194320432143224323432443254326432743284329433043314332433343344335433643374338433943404341434243434344434543464347434843494350435143524353435443554356435743584359436043614362436343644365436643674368436943704371437243734374437543764377437843794380438143824383438443854386438743884389439043914392439343944395439643974398439944004401440244034404440544064407440844094410441144124413441444154416441744184419442044214422442344244425442644274428442944304431443244334434443544364437443844394440444144424443444444454446444744484449445044514452445344544455445644574458445944604461446244634464446544664467446844694470447144724473447444754476447744784479448044814482448344844485448644874488448944904491449244934494449544964497449844994500450145024503450445054506450745084509451045114512451345144515451645174518451945204521452245234524452545264527452845294530453145324533453445354536453745384539454045414542454345444545454645474548454945504551455245534554455545564557455845594560456145624563456445654566456745684569457045714572457345744575457645774578457945804581458245834584458545864587458845894590459145924593459445954596459745984599460046014602460346044605460646074608460946104611461246134614461546164617461846194620462146224623462446254626462746284629463046314632463346344635463646374638463946404641464246434644464546464647464846494650465146524653465446554656465746584659466046614662466346644665466646674668466946704671467246734674467546764677467846794680468146824683468446854686468746884689469046914692469346944695469646974698469947004701470247034704470547064707470847094710471147124713471447154716471747184719472047214722472347244725472647274728472947304731473247334734473547364737473847394740474147424743474447454746474747484749475047514752475347544755475647574758475947604761476247634764476547664767476847694770477147724773477447754776477747784779478047814782478347844785478647874788478947904791479247934794479547964797479847994800480148024803480448054806
  1. # coding: utf-8
  2. from __future__ import unicode_literals
  3. import os
  4. import re
  5. import datetime
  6. import unittest
  7. from django.conf import settings, global_settings
  8. from django.core import mail
  9. from django.core.checks import Error
  10. from django.core.files import temp as tempfile
  11. from django.core.exceptions import ImproperlyConfigured
  12. from django.core.urlresolvers import reverse, NoReverseMatch
  13. # Register auth models with the admin.
  14. from django.contrib.auth import get_permission_codename
  15. from django.contrib.admin import ModelAdmin
  16. from django.contrib.admin.helpers import ACTION_CHECKBOX_NAME
  17. from django.contrib.admin.models import LogEntry, DELETION
  18. from django.contrib.admin.utils import quote
  19. from django.contrib.admin.validation import ModelAdminValidator
  20. from django.contrib.admin.views.main import IS_POPUP_VAR
  21. from django.contrib.admin.tests import AdminSeleniumWebDriverTestCase
  22. from django.contrib.auth import REDIRECT_FIELD_NAME
  23. from django.contrib.auth.models import Group, User, Permission
  24. from django.contrib.contenttypes.models import ContentType
  25. from django.db import connection
  26. from django.forms.utils import ErrorList
  27. from django.template.response import TemplateResponse
  28. from django.test import TestCase
  29. from django.test.utils import patch_logger
  30. from django.test import override_settings
  31. from django.utils import formats
  32. from django.utils import translation
  33. from django.utils.cache import get_max_age
  34. from django.utils.encoding import iri_to_uri, force_bytes
  35. from django.utils.html import escape
  36. from django.utils.http import urlencode, urlquote
  37. from django.utils.six.moves.urllib.parse import urljoin
  38. from django.utils._os import upath
  39. from django.utils import six
  40. # local test models
  41. from .models import (Article, BarAccount, CustomArticle, EmptyModel, FooAccount,
  42. Gallery, ModelWithStringPrimaryKey, Person, Persona, Picture, Podcast,
  43. Section, Subscriber, Vodcast, Language, Collector, Widget, Grommet,
  44. DooHickey, FancyDoodad, Whatsit, Category, Post, Plot, FunkyTag, Chapter,
  45. Book, Promo, WorkHour, Employee, Question, Answer, Inquisition, Actor,
  46. FoodDelivery, RowLevelChangePermissionModel, Paper, CoverLetter, Story,
  47. OtherStory, ComplexSortedPerson, PluggableSearchPerson, Parent, Child, AdminOrderedField,
  48. AdminOrderedModelMethod, AdminOrderedAdminMethod, AdminOrderedCallable,
  49. Report, MainPrepopulated, RelatedPrepopulated, UnorderedObject,
  50. Simple, UndeletableObject, UnchangeableObject, Choice, ShortMessage,
  51. Telegram, Pizza, Topping, FilteredManager, City, Restaurant, Worker,
  52. ParentWithDependentChildren, Character, FieldOverridePost)
  53. from .admin import site, site2, CityAdmin
  54. ERROR_MESSAGE = "Please enter the correct username and password \
  55. for a staff account. Note that both fields may be case-sensitive."
  56. ADMIN_VIEW_TEMPLATES_DIR = settings.TEMPLATE_DIRS + (os.path.join(os.path.dirname(upath(__file__)), 'templates'),)
  57. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',),
  58. USE_I18N=True, USE_L10N=False, LANGUAGE_CODE='en')
  59. class AdminViewBasicTestCase(TestCase):
  60. fixtures = ['admin-views-users.xml', 'admin-views-colors.xml',
  61. 'admin-views-fabrics.xml', 'admin-views-books.xml']
  62. # Store the bit of the URL where the admin is registered as a class
  63. # variable. That way we can test a second AdminSite just by subclassing
  64. # this test case and changing urlbit.
  65. urlbit = 'admin'
  66. urls = "admin_views.urls"
  67. def setUp(self):
  68. self.client.login(username='super', password='secret')
  69. def tearDown(self):
  70. self.client.logout()
  71. formats.reset_format_cache()
  72. def assertContentBefore(self, response, text1, text2, failing_msg=None):
  73. """
  74. Testing utility asserting that text1 appears before text2 in response
  75. content.
  76. """
  77. self.assertEqual(response.status_code, 200)
  78. self.assertTrue(response.content.index(force_bytes(text1)) < response.content.index(force_bytes(text2)),
  79. failing_msg)
  80. class AdminViewBasicTest(AdminViewBasicTestCase):
  81. def testTrailingSlashRequired(self):
  82. """
  83. If you leave off the trailing slash, app should redirect and add it.
  84. """
  85. response = self.client.get('/test_admin/%s/admin_views/article/add' % self.urlbit)
  86. self.assertRedirects(response,
  87. '/test_admin/%s/admin_views/article/add/' % self.urlbit,
  88. status_code=301)
  89. def testBasicAddGet(self):
  90. """
  91. A smoke test to ensure GET on the add_view works.
  92. """
  93. response = self.client.get('/test_admin/%s/admin_views/section/add/' % self.urlbit)
  94. self.assertIsInstance(response, TemplateResponse)
  95. self.assertEqual(response.status_code, 200)
  96. def testAddWithGETArgs(self):
  97. response = self.client.get('/test_admin/%s/admin_views/section/add/' % self.urlbit, {'name': 'My Section'})
  98. self.assertEqual(response.status_code, 200)
  99. self.assertContains(response, 'value="My Section"',
  100. msg_prefix="Couldn't find an input with the right value in the response")
  101. def testBasicEditGet(self):
  102. """
  103. A smoke test to ensure GET on the change_view works.
  104. """
  105. response = self.client.get('/test_admin/%s/admin_views/section/1/' % self.urlbit)
  106. self.assertIsInstance(response, TemplateResponse)
  107. self.assertEqual(response.status_code, 200)
  108. def testBasicEditGetStringPK(self):
  109. """
  110. Ensure GET on the change_view works (returns an HTTP 404 error, see
  111. #11191) when passing a string as the PK argument for a model with an
  112. integer PK field.
  113. """
  114. response = self.client.get('/test_admin/%s/admin_views/section/abc/' % self.urlbit)
  115. self.assertEqual(response.status_code, 404)
  116. def testBasicInheritanceGetStringPK(self):
  117. """
  118. Ensure GET on the change_view works on inherited models (returns an
  119. HTTP 404 error, see #19951) when passing a string as the PK argument
  120. for a model with an integer PK field.
  121. """
  122. response = self.client.get('/test_admin/%s/admin_views/supervillain/abc/' % self.urlbit)
  123. self.assertEqual(response.status_code, 404)
  124. def testBasicAddPost(self):
  125. """
  126. A smoke test to ensure POST on add_view works.
  127. """
  128. post_data = {
  129. "name": "Another Section",
  130. # inline data
  131. "article_set-TOTAL_FORMS": "3",
  132. "article_set-INITIAL_FORMS": "0",
  133. "article_set-MAX_NUM_FORMS": "0",
  134. }
  135. response = self.client.post('/test_admin/%s/admin_views/section/add/' % self.urlbit, post_data)
  136. self.assertEqual(response.status_code, 302) # redirect somewhere
  137. def testPopupAddPost(self):
  138. """
  139. Ensure http response from a popup is properly escaped.
  140. """
  141. post_data = {
  142. '_popup': '1',
  143. 'title': 'title with a new\nline',
  144. 'content': 'some content',
  145. 'date_0': '2010-09-10',
  146. 'date_1': '14:55:39',
  147. }
  148. response = self.client.post('/test_admin/%s/admin_views/article/add/' % self.urlbit, post_data)
  149. self.assertEqual(response.status_code, 200)
  150. self.assertContains(response, 'dismissAddAnotherPopup')
  151. self.assertContains(response, 'title with a new\\u000Aline')
  152. # Post data for edit inline
  153. inline_post_data = {
  154. "name": "Test section",
  155. # inline data
  156. "article_set-TOTAL_FORMS": "6",
  157. "article_set-INITIAL_FORMS": "3",
  158. "article_set-MAX_NUM_FORMS": "0",
  159. "article_set-0-id": "1",
  160. # there is no title in database, give one here or formset will fail.
  161. "article_set-0-title": "Norske bostaver æøå skaper problemer",
  162. "article_set-0-content": "&lt;p&gt;Middle content&lt;/p&gt;",
  163. "article_set-0-date_0": "2008-03-18",
  164. "article_set-0-date_1": "11:54:58",
  165. "article_set-0-section": "1",
  166. "article_set-1-id": "2",
  167. "article_set-1-title": "Need a title.",
  168. "article_set-1-content": "&lt;p&gt;Oldest content&lt;/p&gt;",
  169. "article_set-1-date_0": "2000-03-18",
  170. "article_set-1-date_1": "11:54:58",
  171. "article_set-2-id": "3",
  172. "article_set-2-title": "Need a title.",
  173. "article_set-2-content": "&lt;p&gt;Newest content&lt;/p&gt;",
  174. "article_set-2-date_0": "2009-03-18",
  175. "article_set-2-date_1": "11:54:58",
  176. "article_set-3-id": "",
  177. "article_set-3-title": "",
  178. "article_set-3-content": "",
  179. "article_set-3-date_0": "",
  180. "article_set-3-date_1": "",
  181. "article_set-4-id": "",
  182. "article_set-4-title": "",
  183. "article_set-4-content": "",
  184. "article_set-4-date_0": "",
  185. "article_set-4-date_1": "",
  186. "article_set-5-id": "",
  187. "article_set-5-title": "",
  188. "article_set-5-content": "",
  189. "article_set-5-date_0": "",
  190. "article_set-5-date_1": "",
  191. }
  192. def testBasicEditPost(self):
  193. """
  194. A smoke test to ensure POST on edit_view works.
  195. """
  196. response = self.client.post('/test_admin/%s/admin_views/section/1/' % self.urlbit, self.inline_post_data)
  197. self.assertEqual(response.status_code, 302) # redirect somewhere
  198. def testEditSaveAs(self):
  199. """
  200. Test "save as".
  201. """
  202. post_data = self.inline_post_data.copy()
  203. post_data.update({
  204. '_saveasnew': 'Save+as+new',
  205. "article_set-1-section": "1",
  206. "article_set-2-section": "1",
  207. "article_set-3-section": "1",
  208. "article_set-4-section": "1",
  209. "article_set-5-section": "1",
  210. })
  211. response = self.client.post('/test_admin/%s/admin_views/section/1/' % self.urlbit, post_data)
  212. self.assertEqual(response.status_code, 302) # redirect somewhere
  213. def testChangeListSortingCallable(self):
  214. """
  215. Ensure we can sort on a list_display field that is a callable
  216. (column 2 is callable_year in ArticleAdmin)
  217. """
  218. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'o': 2})
  219. self.assertContentBefore(response, 'Oldest content', 'Middle content',
  220. "Results of sorting on callable are out of order.")
  221. self.assertContentBefore(response, 'Middle content', 'Newest content',
  222. "Results of sorting on callable are out of order.")
  223. def testChangeListSortingModel(self):
  224. """
  225. Ensure we can sort on a list_display field that is a Model method
  226. (column 3 is 'model_year' in ArticleAdmin)
  227. """
  228. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'o': '-3'})
  229. self.assertContentBefore(response, 'Newest content', 'Middle content',
  230. "Results of sorting on Model method are out of order.")
  231. self.assertContentBefore(response, 'Middle content', 'Oldest content',
  232. "Results of sorting on Model method are out of order.")
  233. def testChangeListSortingModelAdmin(self):
  234. """
  235. Ensure we can sort on a list_display field that is a ModelAdmin method
  236. (column 4 is 'modeladmin_year' in ArticleAdmin)
  237. """
  238. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'o': '4'})
  239. self.assertContentBefore(response, 'Oldest content', 'Middle content',
  240. "Results of sorting on ModelAdmin method are out of order.")
  241. self.assertContentBefore(response, 'Middle content', 'Newest content',
  242. "Results of sorting on ModelAdmin method are out of order.")
  243. def testChangeListSortingModelAdminReverse(self):
  244. """
  245. Ensure we can sort on a list_display field that is a ModelAdmin
  246. method in reverse order (i.e. admin_order_field uses the '-' prefix)
  247. (column 6 is 'model_year_reverse' in ArticleAdmin)
  248. """
  249. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'o': '6'})
  250. self.assertContentBefore(response, '2009', '2008',
  251. "Results of sorting on ModelAdmin method are out of order.")
  252. self.assertContentBefore(response, '2008', '2000',
  253. "Results of sorting on ModelAdmin method are out of order.")
  254. # Let's make sure the ordering is right and that we don't get a
  255. # FieldError when we change to descending order
  256. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'o': '-6'})
  257. self.assertContentBefore(response, '2000', '2008',
  258. "Results of sorting on ModelAdmin method are out of order.")
  259. self.assertContentBefore(response, '2008', '2009',
  260. "Results of sorting on ModelAdmin method are out of order.")
  261. def testChangeListSortingMultiple(self):
  262. p1 = Person.objects.create(name="Chris", gender=1, alive=True)
  263. p2 = Person.objects.create(name="Chris", gender=2, alive=True)
  264. p3 = Person.objects.create(name="Bob", gender=1, alive=True)
  265. link1 = reverse('admin:admin_views_person_change', args=(p1.pk,))
  266. link2 = reverse('admin:admin_views_person_change', args=(p2.pk,))
  267. link3 = reverse('admin:admin_views_person_change', args=(p3.pk,))
  268. # Sort by name, gender
  269. # This hard-codes the URL because it'll fail if it runs against the
  270. # 'admin2' custom admin (which doesn't have the Person model).
  271. response = self.client.get('/test_admin/admin/admin_views/person/', {'o': '1.2'})
  272. self.assertContentBefore(response, link3, link1)
  273. self.assertContentBefore(response, link1, link2)
  274. # Sort by gender descending, name
  275. response = self.client.get('/test_admin/admin/admin_views/person/', {'o': '-2.1'})
  276. self.assertContentBefore(response, link2, link3)
  277. self.assertContentBefore(response, link3, link1)
  278. def testChangeListSortingPreserveQuerySetOrdering(self):
  279. """
  280. If no ordering is defined in `ModelAdmin.ordering` or in the query
  281. string, then the underlying order of the queryset should not be
  282. changed, even if it is defined in `Modeladmin.get_queryset()`.
  283. Refs #11868, #7309.
  284. """
  285. p1 = Person.objects.create(name="Amy", gender=1, alive=True, age=80)
  286. p2 = Person.objects.create(name="Bob", gender=1, alive=True, age=70)
  287. p3 = Person.objects.create(name="Chris", gender=2, alive=False, age=60)
  288. link1 = reverse('admin:admin_views_person_change', args=(p1.pk,))
  289. link2 = reverse('admin:admin_views_person_change', args=(p2.pk,))
  290. link3 = reverse('admin:admin_views_person_change', args=(p3.pk,))
  291. # This hard-codes the URL because it'll fail if it runs against the
  292. # 'admin2' custom admin (which doesn't have the Person model).
  293. response = self.client.get('/test_admin/admin/admin_views/person/', {})
  294. self.assertContentBefore(response, link3, link2)
  295. self.assertContentBefore(response, link2, link1)
  296. def testChangeListSortingModelMeta(self):
  297. # Test ordering on Model Meta is respected
  298. l1 = Language.objects.create(iso='ur', name='Urdu')
  299. l2 = Language.objects.create(iso='ar', name='Arabic')
  300. link1 = reverse('admin:admin_views_language_change', args=(quote(l1.pk),))
  301. link2 = reverse('admin:admin_views_language_change', args=(quote(l2.pk),))
  302. response = self.client.get('/test_admin/admin/admin_views/language/', {})
  303. self.assertContentBefore(response, link2, link1)
  304. # Test we can override with query string
  305. response = self.client.get('/test_admin/admin/admin_views/language/', {'o': '-1'})
  306. self.assertContentBefore(response, link1, link2)
  307. def testChangeListSortingOverrideModelAdmin(self):
  308. # Test ordering on Model Admin is respected, and overrides Model Meta
  309. dt = datetime.datetime.now()
  310. p1 = Podcast.objects.create(name="A", release_date=dt)
  311. p2 = Podcast.objects.create(name="B", release_date=dt - datetime.timedelta(10))
  312. link1 = reverse('admin:admin_views_podcast_change', args=(p1.pk,))
  313. link2 = reverse('admin:admin_views_podcast_change', args=(p2.pk,))
  314. response = self.client.get('/test_admin/admin/admin_views/podcast/', {})
  315. self.assertContentBefore(response, link1, link2)
  316. def testMultipleSortSameField(self):
  317. # Check that we get the columns we expect if we have two columns
  318. # that correspond to the same ordering field
  319. dt = datetime.datetime.now()
  320. p1 = Podcast.objects.create(name="A", release_date=dt)
  321. p2 = Podcast.objects.create(name="B", release_date=dt - datetime.timedelta(10))
  322. link1 = reverse('admin:admin_views_podcast_change', args=(quote(p1.pk),))
  323. link2 = reverse('admin:admin_views_podcast_change', args=(quote(p2.pk),))
  324. response = self.client.get('/test_admin/admin/admin_views/podcast/', {})
  325. self.assertContentBefore(response, link1, link2)
  326. p1 = ComplexSortedPerson.objects.create(name="Bob", age=10)
  327. p2 = ComplexSortedPerson.objects.create(name="Amy", age=20)
  328. link1 = reverse('admin:admin_views_complexsortedperson_change', args=(p1.pk,))
  329. link2 = reverse('admin:admin_views_complexsortedperson_change', args=(p2.pk,))
  330. response = self.client.get('/test_admin/admin/admin_views/complexsortedperson/', {})
  331. # Should have 5 columns (including action checkbox col)
  332. self.assertContains(response, '<th scope="col"', count=5)
  333. self.assertContains(response, 'Name')
  334. self.assertContains(response, 'Colored name')
  335. # Check order
  336. self.assertContentBefore(response, 'Name', 'Colored name')
  337. # Check sorting - should be by name
  338. self.assertContentBefore(response, link2, link1)
  339. def testSortIndicatorsAdminOrder(self):
  340. """
  341. Ensures that the admin shows default sort indicators for all
  342. kinds of 'ordering' fields: field names, method on the model
  343. admin and model itself, and other callables. See #17252.
  344. """
  345. models = [(AdminOrderedField, 'adminorderedfield'),
  346. (AdminOrderedModelMethod, 'adminorderedmodelmethod'),
  347. (AdminOrderedAdminMethod, 'adminorderedadminmethod'),
  348. (AdminOrderedCallable, 'adminorderedcallable')]
  349. for model, url in models:
  350. model.objects.create(stuff='The Last Item', order=3)
  351. model.objects.create(stuff='The First Item', order=1)
  352. model.objects.create(stuff='The Middle Item', order=2)
  353. response = self.client.get('/test_admin/admin/admin_views/%s/' % url, {})
  354. self.assertEqual(response.status_code, 200)
  355. # Should have 3 columns including action checkbox col.
  356. self.assertContains(response, '<th scope="col"', count=3, msg_prefix=url)
  357. # Check if the correct column was selected. 2 is the index of the
  358. # 'order' column in the model admin's 'list_display' with 0 being
  359. # the implicit 'action_checkbox' and 1 being the column 'stuff'.
  360. self.assertEqual(response.context['cl'].get_ordering_field_columns(), {2: 'asc'})
  361. # Check order of records.
  362. self.assertContentBefore(response, 'The First Item', 'The Middle Item')
  363. self.assertContentBefore(response, 'The Middle Item', 'The Last Item')
  364. def testLimitedFilter(self):
  365. """Ensure admin changelist filters do not contain objects excluded via limit_choices_to.
  366. This also tests relation-spanning filters (e.g. 'color__value').
  367. """
  368. response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit)
  369. self.assertEqual(response.status_code, 200)
  370. self.assertContains(response, '<div id="changelist-filter">',
  371. msg_prefix="Expected filter not found in changelist view")
  372. self.assertNotContains(response, '<a href="?color__id__exact=3">Blue</a>',
  373. msg_prefix="Changelist filter not correctly limited by limit_choices_to")
  374. def testRelationSpanningFilters(self):
  375. response = self.client.get('/test_admin/%s/admin_views/chapterxtra1/' %
  376. self.urlbit)
  377. self.assertEqual(response.status_code, 200)
  378. self.assertContains(response, '<div id="changelist-filter">')
  379. filters = {
  380. 'chap__id__exact': dict(
  381. values=[c.id for c in Chapter.objects.all()],
  382. test=lambda obj, value: obj.chap.id == value),
  383. 'chap__title': dict(
  384. values=[c.title for c in Chapter.objects.all()],
  385. test=lambda obj, value: obj.chap.title == value),
  386. 'chap__book__id__exact': dict(
  387. values=[b.id for b in Book.objects.all()],
  388. test=lambda obj, value: obj.chap.book.id == value),
  389. 'chap__book__name': dict(
  390. values=[b.name for b in Book.objects.all()],
  391. test=lambda obj, value: obj.chap.book.name == value),
  392. 'chap__book__promo__id__exact': dict(
  393. values=[p.id for p in Promo.objects.all()],
  394. test=lambda obj, value: obj.chap.book.promo_set.filter(id=value).exists()),
  395. 'chap__book__promo__name': dict(
  396. values=[p.name for p in Promo.objects.all()],
  397. test=lambda obj, value: obj.chap.book.promo_set.filter(name=value).exists()),
  398. }
  399. for filter_path, params in filters.items():
  400. for value in params['values']:
  401. query_string = urlencode({filter_path: value})
  402. # ensure filter link exists
  403. self.assertContains(response, '<a href="?%s">' % query_string)
  404. # ensure link works
  405. filtered_response = self.client.get(
  406. '/test_admin/%s/admin_views/chapterxtra1/?%s' % (
  407. self.urlbit, query_string))
  408. self.assertEqual(filtered_response.status_code, 200)
  409. # ensure changelist contains only valid objects
  410. for obj in filtered_response.context['cl'].queryset.all():
  411. self.assertTrue(params['test'](obj, value))
  412. def testIncorrectLookupParameters(self):
  413. """Ensure incorrect lookup parameters are handled gracefully."""
  414. response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'notarealfield': '5'})
  415. self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)
  416. # Spanning relationships through an inexistant related object (Refs #16716)
  417. response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'notarealfield__whatever': '5'})
  418. self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)
  419. response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'color__id__exact': 'StringNotInteger!'})
  420. self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)
  421. # Regression test for #18530
  422. response = self.client.get('/test_admin/%s/admin_views/thing/' % self.urlbit, {'pub_date__gte': 'foo'})
  423. self.assertRedirects(response, '/test_admin/%s/admin_views/thing/?e=1' % self.urlbit)
  424. def testIsNullLookups(self):
  425. """Ensure is_null is handled correctly."""
  426. Article.objects.create(title="I Could Go Anywhere", content="Versatile", date=datetime.datetime.now())
  427. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit)
  428. self.assertContains(response, '4 articles')
  429. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': 'false'})
  430. self.assertContains(response, '3 articles')
  431. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': '0'})
  432. self.assertContains(response, '3 articles')
  433. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': 'true'})
  434. self.assertContains(response, '1 article')
  435. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit, {'section__isnull': '1'})
  436. self.assertContains(response, '1 article')
  437. def testLogoutAndPasswordChangeURLs(self):
  438. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit)
  439. self.assertContains(response, '<a href="/test_admin/%s/logout/">' % self.urlbit)
  440. self.assertContains(response, '<a href="/test_admin/%s/password_change/">' % self.urlbit)
  441. def testNamedGroupFieldChoicesChangeList(self):
  442. """
  443. Ensures the admin changelist shows correct values in the relevant column
  444. for rows corresponding to instances of a model in which a named group
  445. has been used in the choices option of a field.
  446. """
  447. link1 = reverse('admin:admin_views_fabric_change', args=(1,), current_app=self.urlbit)
  448. link2 = reverse('admin:admin_views_fabric_change', args=(2,), current_app=self.urlbit)
  449. response = self.client.get('/test_admin/%s/admin_views/fabric/' % self.urlbit)
  450. fail_msg = "Changelist table isn't showing the right human-readable values set by a model field 'choices' option named group."
  451. self.assertContains(response, '<a href="%s">Horizontal</a>' % link1, msg_prefix=fail_msg, html=True)
  452. self.assertContains(response, '<a href="%s">Vertical</a>' % link2, msg_prefix=fail_msg, html=True)
  453. def testNamedGroupFieldChoicesFilter(self):
  454. """
  455. Ensures the filter UI shows correctly when at least one named group has
  456. been used in the choices option of a model field.
  457. """
  458. response = self.client.get('/test_admin/%s/admin_views/fabric/' % self.urlbit)
  459. fail_msg = "Changelist filter isn't showing options contained inside a model field 'choices' option named group."
  460. self.assertContains(response, '<div id="changelist-filter">')
  461. self.assertContains(response,
  462. '<a href="?surface__exact=x">Horizontal</a>', msg_prefix=fail_msg, html=True)
  463. self.assertContains(response,
  464. '<a href="?surface__exact=y">Vertical</a>', msg_prefix=fail_msg, html=True)
  465. def testChangeListNullBooleanDisplay(self):
  466. Post.objects.create(public=None)
  467. # This hard-codes the URl because it'll fail if it runs
  468. # against the 'admin2' custom admin (which doesn't have the
  469. # Post model).
  470. response = self.client.get("/test_admin/admin/admin_views/post/")
  471. self.assertContains(response, 'icon-unknown.gif')
  472. def testI18NLanguageNonEnglishDefault(self):
  473. """
  474. Check if the JavaScript i18n view returns an empty language catalog
  475. if the default language is non-English but the selected language
  476. is English. See #13388 and #3594 for more details.
  477. """
  478. with self.settings(LANGUAGE_CODE='fr'), translation.override('en-us'):
  479. response = self.client.get('/test_admin/admin/jsi18n/')
  480. self.assertNotContains(response, 'Choisir une heure')
  481. def testI18NLanguageNonEnglishFallback(self):
  482. """
  483. Makes sure that the fallback language is still working properly
  484. in cases where the selected language cannot be found.
  485. """
  486. with self.settings(LANGUAGE_CODE='fr'), translation.override('none'):
  487. response = self.client.get('/test_admin/admin/jsi18n/')
  488. self.assertContains(response, 'Choisir une heure')
  489. def testL10NDeactivated(self):
  490. """
  491. Check if L10N is deactivated, the JavaScript i18n view doesn't
  492. return localized date/time formats. Refs #14824.
  493. """
  494. with self.settings(LANGUAGE_CODE='ru', USE_L10N=False), translation.override('none'):
  495. response = self.client.get('/test_admin/admin/jsi18n/')
  496. self.assertNotContains(response, '%d.%m.%Y %H:%M:%S')
  497. self.assertContains(response, '%Y-%m-%d %H:%M:%S')
  498. def test_disallowed_filtering(self):
  499. with patch_logger('django.security.DisallowedModelAdminLookup', 'error') as calls:
  500. response = self.client.get("/test_admin/admin/admin_views/album/?owner__email__startswith=fuzzy")
  501. self.assertEqual(response.status_code, 400)
  502. self.assertEqual(len(calls), 1)
  503. # Filters are allowed if explicitly included in list_filter
  504. response = self.client.get("/test_admin/admin/admin_views/thing/?color__value__startswith=red")
  505. self.assertEqual(response.status_code, 200)
  506. response = self.client.get("/test_admin/admin/admin_views/thing/?color__value=red")
  507. self.assertEqual(response.status_code, 200)
  508. # Filters should be allowed if they involve a local field without the
  509. # need to whitelist them in list_filter or date_hierarchy.
  510. response = self.client.get("/test_admin/admin/admin_views/person/?age__gt=30")
  511. self.assertEqual(response.status_code, 200)
  512. e1 = Employee.objects.create(name='Anonymous', gender=1, age=22, alive=True, code='123')
  513. e2 = Employee.objects.create(name='Visitor', gender=2, age=19, alive=True, code='124')
  514. WorkHour.objects.create(datum=datetime.datetime.now(), employee=e1)
  515. WorkHour.objects.create(datum=datetime.datetime.now(), employee=e2)
  516. response = self.client.get("/test_admin/admin/admin_views/workhour/")
  517. self.assertEqual(response.status_code, 200)
  518. self.assertContains(response, 'employee__person_ptr__exact')
  519. response = self.client.get("/test_admin/admin/admin_views/workhour/?employee__person_ptr__exact=%d" % e1.pk)
  520. self.assertEqual(response.status_code, 200)
  521. def test_allowed_filtering_15103(self):
  522. """
  523. Regressions test for ticket 15103 - filtering on fields defined in a
  524. ForeignKey 'limit_choices_to' should be allowed, otherwise raw_id_fields
  525. can break.
  526. """
  527. # Filters should be allowed if they are defined on a ForeignKey pointing to this model
  528. response = self.client.get("/test_admin/admin/admin_views/inquisition/?leader__name=Palin&leader__age=27")
  529. self.assertEqual(response.status_code, 200)
  530. def test_popup_dismiss_related(self):
  531. """
  532. Regression test for ticket 20664 - ensure the pk is properly quoted.
  533. """
  534. actor = Actor.objects.create(name="Palin", age=27)
  535. response = self.client.get("/test_admin/admin/admin_views/actor/?%s" % IS_POPUP_VAR)
  536. self.assertContains(response, "opener.dismissRelatedLookupPopup(window, &#39;%s&#39;)" % actor.pk)
  537. def test_hide_change_password(self):
  538. """
  539. Tests if the "change password" link in the admin is hidden if the User
  540. does not have a usable password set.
  541. (against 9bea85795705d015cdadc82c68b99196a8554f5c)
  542. """
  543. user = User.objects.get(username='super')
  544. user.set_unusable_password()
  545. user.save()
  546. response = self.client.get('/test_admin/admin/')
  547. self.assertNotContains(response, reverse('admin:password_change'),
  548. msg_prefix='The "change password" link should not be displayed if a user does not have a usable password.')
  549. def test_change_view_with_show_delete_extra_context(self):
  550. """
  551. Ensured that the 'show_delete' context variable in the admin's change
  552. view actually controls the display of the delete button.
  553. Refs #10057.
  554. """
  555. instance = UndeletableObject.objects.create(name='foo')
  556. response = self.client.get('/test_admin/%s/admin_views/undeletableobject/%d/' %
  557. (self.urlbit, instance.pk))
  558. self.assertNotContains(response, 'deletelink')
  559. def test_allows_attributeerror_to_bubble_up(self):
  560. """
  561. Ensure that AttributeErrors are allowed to bubble when raised inside
  562. a change list view.
  563. Requires a model to be created so there's something to be displayed
  564. Refs: #16655, #18593, and #18747
  565. """
  566. Simple.objects.create()
  567. with self.assertRaises(AttributeError):
  568. self.client.get('/test_admin/%s/admin_views/simple/' % self.urlbit)
  569. def test_changelist_with_no_change_url(self):
  570. """
  571. ModelAdmin.changelist_view shouldn't result in a NoReverseMatch if url
  572. for change_view is removed from get_urls
  573. Regression test for #20934
  574. """
  575. UnchangeableObject.objects.create()
  576. response = self.client.get('/test_admin/admin/admin_views/unchangeableobject/')
  577. self.assertEqual(response.status_code, 200)
  578. # Check the format of the shown object -- shouldn't contain a change link
  579. self.assertContains(response, '<th class="field-__str__">UnchangeableObject object</th>', html=True)
  580. def test_invalid_appindex_url(self):
  581. """
  582. #21056 -- URL reversing shouldn't work for nonexistent apps.
  583. """
  584. good_url = '/test_admin/admin/admin_views/'
  585. confirm_good_url = reverse('admin:app_list',
  586. kwargs={'app_label': 'admin_views'})
  587. self.assertEqual(good_url, confirm_good_url)
  588. with self.assertRaises(NoReverseMatch):
  589. reverse('admin:app_list', kwargs={'app_label': 'this_should_fail'})
  590. with self.assertRaises(NoReverseMatch):
  591. reverse('admin:app_list', args=('admin_views2',))
  592. @override_settings(TEMPLATE_DIRS=ADMIN_VIEW_TEMPLATES_DIR)
  593. class AdminCustomTemplateTests(AdminViewBasicTestCase):
  594. def test_extended_bodyclass_template_change_form(self):
  595. """
  596. Ensure that the admin/change_form.html template uses block.super in the
  597. bodyclass block.
  598. """
  599. response = self.client.get('/test_admin/%s/admin_views/section/add/' % self.urlbit)
  600. self.assertContains(response, 'bodyclass_consistency_check ')
  601. def test_extended_bodyclass_template_change_password(self):
  602. """
  603. Ensure that the auth/user/change_password.html template uses block
  604. super in the bodyclass block.
  605. """
  606. user = User.objects.get(username='super')
  607. response = self.client.get('/test_admin/%s/auth/user/%s/password/' % (self.urlbit, user.id))
  608. self.assertContains(response, 'bodyclass_consistency_check ')
  609. def test_extended_bodyclass_template_index(self):
  610. """
  611. Ensure that the admin/index.html template uses block.super in the
  612. bodyclass block.
  613. """
  614. response = self.client.get('/test_admin/%s/' % self.urlbit)
  615. self.assertContains(response, 'bodyclass_consistency_check ')
  616. def test_extended_bodyclass_change_list(self):
  617. """
  618. Ensure that the admin/change_list.html' template uses block.super
  619. in the bodyclass block.
  620. """
  621. response = self.client.get('/test_admin/%s/admin_views/article/' % self.urlbit)
  622. self.assertContains(response, 'bodyclass_consistency_check ')
  623. def test_extended_bodyclass_template_login(self):
  624. """
  625. Ensure that the admin/login.html template uses block.super in the
  626. bodyclass block.
  627. """
  628. self.client.logout()
  629. response = self.client.get('/test_admin/%s/login/' % self.urlbit)
  630. self.assertContains(response, 'bodyclass_consistency_check ')
  631. def test_extended_bodyclass_template_delete_confirmation(self):
  632. """
  633. Ensure that the admin/delete_confirmation.html template uses
  634. block.super in the bodyclass block.
  635. """
  636. group = Group.objects.create(name="foogroup")
  637. response = self.client.get('/test_admin/%s/auth/group/%s/delete/' % (self.urlbit, group.id))
  638. self.assertContains(response, 'bodyclass_consistency_check ')
  639. def test_extended_bodyclass_template_delete_selected_confirmation(self):
  640. """
  641. Ensure that the admin/delete_selected_confirmation.html template uses
  642. block.super in bodyclass block.
  643. """
  644. group = Group.objects.create(name="foogroup")
  645. post_data = {
  646. 'action': 'delete_selected',
  647. 'selected_across': '0',
  648. 'index': '0',
  649. '_selected_action': group.id
  650. }
  651. response = self.client.post('/test_admin/%s/auth/group/' % (self.urlbit), post_data)
  652. self.assertContains(response, 'bodyclass_consistency_check ')
  653. def test_filter_with_custom_template(self):
  654. """
  655. Ensure that one can use a custom template to render an admin filter.
  656. Refs #17515.
  657. """
  658. response = self.client.get("/test_admin/admin/admin_views/color2/")
  659. self.assertTemplateUsed(response, 'custom_filter_template.html')
  660. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  661. class AdminViewFormUrlTest(TestCase):
  662. urls = "admin_views.urls"
  663. fixtures = ["admin-views-users.xml"]
  664. urlbit = "admin3"
  665. def setUp(self):
  666. self.client.login(username='super', password='secret')
  667. def tearDown(self):
  668. self.client.logout()
  669. def testChangeFormUrlHasCorrectValue(self):
  670. """
  671. Tests whether change_view has form_url in response.context
  672. """
  673. response = self.client.get('/test_admin/%s/admin_views/section/1/' % self.urlbit)
  674. self.assertTrue('form_url' in response.context, msg='form_url not present in response.context')
  675. self.assertEqual(response.context['form_url'], 'pony')
  676. def testInitialDataCanBeOverridden(self):
  677. """
  678. Tests that the behavior for setting initial
  679. form data can be overridden in the ModelAdmin class.
  680. Usually, the initial value is set via the GET params.
  681. """
  682. response = self.client.get('/test_admin/%s/admin_views/restaurant/add/' % self.urlbit, {'name': 'test_value'})
  683. # this would be the usual behaviour
  684. self.assertNotContains(response, 'value="test_value"')
  685. # this is the overridden behaviour
  686. self.assertContains(response, 'value="overridden_value"')
  687. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  688. class AdminJavaScriptTest(TestCase):
  689. fixtures = ['admin-views-users.xml']
  690. urls = "admin_views.urls"
  691. def setUp(self):
  692. self.client.login(username='super', password='secret')
  693. def tearDown(self):
  694. self.client.logout()
  695. def test_js_minified_only_if_debug_is_false(self):
  696. """
  697. Ensure that the minified versions of the JS files are only used when
  698. DEBUG is False.
  699. Refs #17521.
  700. """
  701. with override_settings(DEBUG=False):
  702. response = self.client.get(
  703. '/test_admin/%s/admin_views/section/add/' % 'admin')
  704. self.assertNotContains(response, 'jquery.js')
  705. self.assertContains(response, 'jquery.min.js')
  706. self.assertNotContains(response, 'prepopulate.js')
  707. self.assertContains(response, 'prepopulate.min.js')
  708. self.assertNotContains(response, 'actions.js')
  709. self.assertContains(response, 'actions.min.js')
  710. self.assertNotContains(response, 'collapse.js')
  711. self.assertContains(response, 'collapse.min.js')
  712. self.assertNotContains(response, 'inlines.js')
  713. self.assertContains(response, 'inlines.min.js')
  714. with override_settings(DEBUG=True):
  715. response = self.client.get(
  716. '/test_admin/%s/admin_views/section/add/' % 'admin')
  717. self.assertContains(response, 'jquery.js')
  718. self.assertNotContains(response, 'jquery.min.js')
  719. self.assertContains(response, 'prepopulate.js')
  720. self.assertNotContains(response, 'prepopulate.min.js')
  721. self.assertContains(response, 'actions.js')
  722. self.assertNotContains(response, 'actions.min.js')
  723. self.assertContains(response, 'collapse.js')
  724. self.assertNotContains(response, 'collapse.min.js')
  725. self.assertContains(response, 'inlines.js')
  726. self.assertNotContains(response, 'inlines.min.js')
  727. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  728. class SaveAsTests(TestCase):
  729. urls = "admin_views.urls"
  730. fixtures = ['admin-views-users.xml', 'admin-views-person.xml']
  731. def setUp(self):
  732. self.client.login(username='super', password='secret')
  733. def tearDown(self):
  734. self.client.logout()
  735. def test_save_as_duplication(self):
  736. """Ensure save as actually creates a new person"""
  737. post_data = {'_saveasnew': '', 'name': 'John M', 'gender': 1, 'age': 42}
  738. self.client.post('/test_admin/admin/admin_views/person/1/', post_data)
  739. self.assertEqual(len(Person.objects.filter(name='John M')), 1)
  740. self.assertEqual(len(Person.objects.filter(id=1)), 1)
  741. def test_save_as_display(self):
  742. """
  743. Ensure that 'save as' is displayed when activated and after submitting
  744. invalid data aside save_as_new will not show us a form to overwrite the
  745. initial model.
  746. """
  747. response = self.client.get('/test_admin/admin/admin_views/person/1/')
  748. self.assertTrue(response.context['save_as'])
  749. post_data = {'_saveasnew': '', 'name': 'John M', 'gender': 3, 'alive': 'checked'}
  750. response = self.client.post('/test_admin/admin/admin_views/person/1/', post_data)
  751. self.assertEqual(response.context['form_url'], '/test_admin/admin/admin_views/person/add/')
  752. class CustomModelAdminTest(AdminViewBasicTestCase):
  753. urls = "admin_views.urls"
  754. urlbit = "admin2"
  755. def testCustomAdminSiteLoginForm(self):
  756. self.client.logout()
  757. response = self.client.get('/test_admin/admin2/', follow=True)
  758. self.assertIsInstance(response, TemplateResponse)
  759. self.assertEqual(response.status_code, 200)
  760. login = self.client.post('/test_admin/admin2/login/', {
  761. REDIRECT_FIELD_NAME: '/test_admin/admin2/',
  762. 'username': 'customform',
  763. 'password': 'secret',
  764. }, follow=True)
  765. self.assertIsInstance(login, TemplateResponse)
  766. self.assertEqual(login.status_code, 200)
  767. self.assertContains(login, 'custom form error')
  768. def testCustomAdminSiteLoginTemplate(self):
  769. self.client.logout()
  770. response = self.client.get('/test_admin/admin2/', follow=True)
  771. self.assertIsInstance(response, TemplateResponse)
  772. self.assertTemplateUsed(response, 'custom_admin/login.html')
  773. self.assertContains(response, 'Hello from a custom login template')
  774. def testCustomAdminSiteLogoutTemplate(self):
  775. response = self.client.get('/test_admin/admin2/logout/')
  776. self.assertIsInstance(response, TemplateResponse)
  777. self.assertTemplateUsed(response, 'custom_admin/logout.html')
  778. self.assertContains(response, 'Hello from a custom logout template')
  779. def testCustomAdminSiteIndexViewAndTemplate(self):
  780. try:
  781. response = self.client.get('/test_admin/admin2/')
  782. except TypeError:
  783. self.fail('AdminSite.index_template should accept a list of template paths')
  784. self.assertIsInstance(response, TemplateResponse)
  785. self.assertTemplateUsed(response, 'custom_admin/index.html')
  786. self.assertContains(response, 'Hello from a custom index template *bar*')
  787. def testCustomAdminSiteAppIndexViewandTemplate(self):
  788. response = self.client.get('/test_admin/admin2/admin_views/')
  789. self.assertIsInstance(response, TemplateResponse)
  790. self.assertTemplateUsed(response, 'custom_admin/app_index.html')
  791. self.assertContains(response, 'Hello from a custom app_index template')
  792. def testCustomAdminSitePasswordChangeTemplate(self):
  793. response = self.client.get('/test_admin/admin2/password_change/')
  794. self.assertIsInstance(response, TemplateResponse)
  795. self.assertTemplateUsed(response, 'custom_admin/password_change_form.html')
  796. self.assertContains(response, 'Hello from a custom password change form template')
  797. def testCustomAdminSitePasswordChangeDoneTemplate(self):
  798. response = self.client.get('/test_admin/admin2/password_change/done/')
  799. self.assertIsInstance(response, TemplateResponse)
  800. self.assertTemplateUsed(response, 'custom_admin/password_change_done.html')
  801. self.assertContains(response, 'Hello from a custom password change done template')
  802. def testCustomAdminSiteView(self):
  803. self.client.login(username='super', password='secret')
  804. response = self.client.get('/test_admin/%s/my_view/' % self.urlbit)
  805. self.assertEqual(response.content, b"Django is a magical pony!")
  806. def test_pwd_change_custom_template(self):
  807. self.client.login(username='super', password='secret')
  808. su = User.objects.get(username='super')
  809. try:
  810. response = self.client.get('/test_admin/admin4/auth/user/%s/password/' % su.pk)
  811. except TypeError:
  812. self.fail('ModelAdmin.change_user_password_template should accept a list of template paths')
  813. self.assertEqual(response.status_code, 200)
  814. def get_perm(Model, perm):
  815. """Return the permission object, for the Model"""
  816. ct = ContentType.objects.get_for_model(Model)
  817. return Permission.objects.get(content_type=ct, codename=perm)
  818. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  819. class AdminViewPermissionsTest(TestCase):
  820. """Tests for Admin Views Permissions."""
  821. urls = "admin_views.urls"
  822. fixtures = ['admin-views-users.xml']
  823. def setUp(self):
  824. """Test setup."""
  825. # Setup permissions, for our users who can add, change, and delete.
  826. # We can't put this into the fixture, because the content type id
  827. # and the permission id could be different on each run of the test.
  828. opts = Article._meta
  829. # User who can add Articles
  830. add_user = User.objects.get(username='adduser')
  831. add_user.user_permissions.add(get_perm(Article,
  832. get_permission_codename('add', opts)))
  833. # User who can change Articles
  834. change_user = User.objects.get(username='changeuser')
  835. change_user.user_permissions.add(get_perm(Article,
  836. get_permission_codename('change', opts)))
  837. # User who can delete Articles
  838. delete_user = User.objects.get(username='deleteuser')
  839. delete_user.user_permissions.add(get_perm(Article,
  840. get_permission_codename('delete', opts)))
  841. delete_user.user_permissions.add(get_perm(Section,
  842. get_permission_codename('delete', Section._meta)))
  843. # login POST dicts
  844. self.super_login = {
  845. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  846. 'username': 'super',
  847. 'password': 'secret',
  848. }
  849. self.super_email_login = {
  850. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  851. 'username': 'super@example.com',
  852. 'password': 'secret',
  853. }
  854. self.super_email_bad_login = {
  855. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  856. 'username': 'super@example.com',
  857. 'password': 'notsecret',
  858. }
  859. self.adduser_login = {
  860. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  861. 'username': 'adduser',
  862. 'password': 'secret',
  863. }
  864. self.changeuser_login = {
  865. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  866. 'username': 'changeuser',
  867. 'password': 'secret',
  868. }
  869. self.deleteuser_login = {
  870. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  871. 'username': 'deleteuser',
  872. 'password': 'secret',
  873. }
  874. self.joepublic_login = {
  875. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  876. 'username': 'joepublic',
  877. 'password': 'secret',
  878. }
  879. self.no_username_login = {
  880. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  881. 'password': 'secret',
  882. }
  883. def testLogin(self):
  884. """
  885. Make sure only staff members can log in.
  886. Successful posts to the login page will redirect to the orignal url.
  887. Unsuccessfull attempts will continue to render the login page with
  888. a 200 status code.
  889. """
  890. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  891. # Super User
  892. response = self.client.get('/test_admin/admin/')
  893. self.assertEqual(response.status_code, 302)
  894. login = self.client.post(login_url, self.super_login)
  895. self.assertRedirects(login, '/test_admin/admin/')
  896. self.assertFalse(login.context)
  897. self.client.get('/test_admin/admin/logout/')
  898. # Test if user enters email address
  899. response = self.client.get('/test_admin/admin/')
  900. self.assertEqual(response.status_code, 302)
  901. login = self.client.post(login_url, self.super_email_login)
  902. self.assertContains(login, ERROR_MESSAGE)
  903. # only correct passwords get a username hint
  904. login = self.client.post(login_url, self.super_email_bad_login)
  905. self.assertContains(login, ERROR_MESSAGE)
  906. new_user = User(username='jondoe', password='secret', email='super@example.com')
  907. new_user.save()
  908. # check to ensure if there are multiple email addresses a user doesn't get a 500
  909. login = self.client.post(login_url, self.super_email_login)
  910. self.assertContains(login, ERROR_MESSAGE)
  911. # Add User
  912. response = self.client.get('/test_admin/admin/')
  913. self.assertEqual(response.status_code, 302)
  914. login = self.client.post(login_url, self.adduser_login)
  915. self.assertRedirects(login, '/test_admin/admin/')
  916. self.assertFalse(login.context)
  917. self.client.get('/test_admin/admin/logout/')
  918. # Change User
  919. response = self.client.get('/test_admin/admin/')
  920. self.assertEqual(response.status_code, 302)
  921. login = self.client.post(login_url, self.changeuser_login)
  922. self.assertRedirects(login, '/test_admin/admin/')
  923. self.assertFalse(login.context)
  924. self.client.get('/test_admin/admin/logout/')
  925. # Delete User
  926. response = self.client.get('/test_admin/admin/')
  927. self.assertEqual(response.status_code, 302)
  928. login = self.client.post(login_url, self.deleteuser_login)
  929. self.assertRedirects(login, '/test_admin/admin/')
  930. self.assertFalse(login.context)
  931. self.client.get('/test_admin/admin/logout/')
  932. # Regular User should not be able to login.
  933. response = self.client.get('/test_admin/admin/')
  934. self.assertEqual(response.status_code, 302)
  935. login = self.client.post(login_url, self.joepublic_login)
  936. self.assertEqual(login.status_code, 200)
  937. self.assertContains(login, ERROR_MESSAGE)
  938. # Requests without username should not return 500 errors.
  939. response = self.client.get('/test_admin/admin/')
  940. self.assertEqual(response.status_code, 302)
  941. login = self.client.post(login_url, self.no_username_login)
  942. self.assertEqual(login.status_code, 200)
  943. form = login.context[0].get('form')
  944. self.assertEqual(form.errors['username'][0], 'This field is required.')
  945. def testLoginSuccessfullyRedirectsToOriginalUrl(self):
  946. response = self.client.get('/test_admin/admin/')
  947. self.assertEqual(response.status_code, 302)
  948. query_string = 'the-answer=42'
  949. redirect_url = '/test_admin/admin/?%s' % query_string
  950. new_next = {REDIRECT_FIELD_NAME: redirect_url}
  951. post_data = self.super_login.copy()
  952. post_data.pop(REDIRECT_FIELD_NAME)
  953. login = self.client.post(
  954. '%s?%s' % (reverse('admin:login'), urlencode(new_next)),
  955. post_data)
  956. self.assertRedirects(login, redirect_url)
  957. def testDoubleLoginIsNotAllowed(self):
  958. """Regression test for #19327"""
  959. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  960. response = self.client.get('/test_admin/admin/')
  961. self.assertEqual(response.status_code, 302)
  962. # Establish a valid admin session
  963. login = self.client.post(login_url, self.super_login)
  964. self.assertRedirects(login, '/test_admin/admin/')
  965. self.assertFalse(login.context)
  966. # Logging in with non-admin user fails
  967. login = self.client.post(login_url, self.joepublic_login)
  968. self.assertEqual(login.status_code, 200)
  969. self.assertContains(login, ERROR_MESSAGE)
  970. # Establish a valid admin session
  971. login = self.client.post(login_url, self.super_login)
  972. self.assertRedirects(login, '/test_admin/admin/')
  973. self.assertFalse(login.context)
  974. # Logging in with admin user while already logged in
  975. login = self.client.post(login_url, self.super_login)
  976. self.assertRedirects(login, '/test_admin/admin/')
  977. self.assertFalse(login.context)
  978. self.client.get('/test_admin/admin/logout/')
  979. def testAddView(self):
  980. """Test add view restricts access and actually adds items."""
  981. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  982. add_dict = {'title': 'Døm ikke',
  983. 'content': '<p>great article</p>',
  984. 'date_0': '2008-03-18', 'date_1': '10:54:39',
  985. 'section': 1}
  986. # Change User should not have access to add articles
  987. self.client.get('/test_admin/admin/')
  988. self.client.post(login_url, self.changeuser_login)
  989. # make sure the view removes test cookie
  990. self.assertEqual(self.client.session.test_cookie_worked(), False)
  991. response = self.client.get('/test_admin/admin/admin_views/article/add/')
  992. self.assertEqual(response.status_code, 403)
  993. # Try POST just to make sure
  994. post = self.client.post('/test_admin/admin/admin_views/article/add/', add_dict)
  995. self.assertEqual(post.status_code, 403)
  996. self.assertEqual(Article.objects.all().count(), 3)
  997. self.client.get('/test_admin/admin/logout/')
  998. # Add user may login and POST to add view, then redirect to admin root
  999. self.client.get('/test_admin/admin/')
  1000. self.client.post(login_url, self.adduser_login)
  1001. addpage = self.client.get('/test_admin/admin/admin_views/article/add/')
  1002. change_list_link = '&rsaquo; <a href="/test_admin/admin/admin_views/article/">Articles</a>'
  1003. self.assertNotContains(addpage, change_list_link,
  1004. msg_prefix='User restricted to add permission is given link to change list view in breadcrumbs.')
  1005. post = self.client.post('/test_admin/admin/admin_views/article/add/', add_dict)
  1006. self.assertRedirects(post, '/test_admin/admin/')
  1007. self.assertEqual(Article.objects.all().count(), 4)
  1008. self.assertEqual(len(mail.outbox), 1)
  1009. self.assertEqual(mail.outbox[0].subject, 'Greetings from a created object')
  1010. self.client.get('/test_admin/admin/logout/')
  1011. # Super can add too, but is redirected to the change list view
  1012. self.client.get('/test_admin/admin/')
  1013. self.client.post(login_url, self.super_login)
  1014. addpage = self.client.get('/test_admin/admin/admin_views/article/add/')
  1015. self.assertContains(addpage, change_list_link,
  1016. msg_prefix='Unrestricted user is not given link to change list view in breadcrumbs.')
  1017. post = self.client.post('/test_admin/admin/admin_views/article/add/', add_dict)
  1018. self.assertRedirects(post, '/test_admin/admin/admin_views/article/')
  1019. self.assertEqual(Article.objects.all().count(), 5)
  1020. self.client.get('/test_admin/admin/logout/')
  1021. # 8509 - if a normal user is already logged in, it is possible
  1022. # to change user into the superuser without error
  1023. self.client.login(username='joepublic', password='secret')
  1024. # Check and make sure that if user expires, data still persists
  1025. self.client.get('/test_admin/admin/')
  1026. self.client.post(login_url, self.super_login)
  1027. # make sure the view removes test cookie
  1028. self.assertEqual(self.client.session.test_cookie_worked(), False)
  1029. def testChangeView(self):
  1030. """Change view should restrict access and allow users to edit items."""
  1031. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  1032. change_dict = {'title': 'Ikke fordømt',
  1033. 'content': '<p>edited article</p>',
  1034. 'date_0': '2008-03-18', 'date_1': '10:54:39',
  1035. 'section': 1}
  1036. # add user should not be able to view the list of article or change any of them
  1037. self.client.get('/test_admin/admin/')
  1038. self.client.post(login_url, self.adduser_login)
  1039. response = self.client.get('/test_admin/admin/admin_views/article/')
  1040. self.assertEqual(response.status_code, 403)
  1041. response = self.client.get('/test_admin/admin/admin_views/article/1/')
  1042. self.assertEqual(response.status_code, 403)
  1043. post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)
  1044. self.assertEqual(post.status_code, 403)
  1045. self.client.get('/test_admin/admin/logout/')
  1046. # change user can view all items and edit them
  1047. self.client.get('/test_admin/admin/')
  1048. self.client.post(login_url, self.changeuser_login)
  1049. response = self.client.get('/test_admin/admin/admin_views/article/')
  1050. self.assertEqual(response.status_code, 200)
  1051. response = self.client.get('/test_admin/admin/admin_views/article/1/')
  1052. self.assertEqual(response.status_code, 200)
  1053. post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)
  1054. self.assertRedirects(post, '/test_admin/admin/admin_views/article/')
  1055. self.assertEqual(Article.objects.get(pk=1).content, '<p>edited article</p>')
  1056. # one error in form should produce singular error message, multiple errors plural
  1057. change_dict['title'] = ''
  1058. post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)
  1059. self.assertContains(post, 'Please correct the error below.',
  1060. msg_prefix='Singular error message not found in response to post with one error')
  1061. change_dict['content'] = ''
  1062. post = self.client.post('/test_admin/admin/admin_views/article/1/', change_dict)
  1063. self.assertContains(post, 'Please correct the errors below.',
  1064. msg_prefix='Plural error message not found in response to post with multiple errors')
  1065. self.client.get('/test_admin/admin/logout/')
  1066. # Test redirection when using row-level change permissions. Refs #11513.
  1067. RowLevelChangePermissionModel.objects.create(id=1, name="odd id")
  1068. RowLevelChangePermissionModel.objects.create(id=2, name="even id")
  1069. for login_dict in [self.super_login, self.changeuser_login, self.adduser_login, self.deleteuser_login]:
  1070. self.client.post(login_url, login_dict)
  1071. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/1/')
  1072. self.assertEqual(response.status_code, 403)
  1073. response = self.client.post('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/1/', {'name': 'changed'})
  1074. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=1).name, 'odd id')
  1075. self.assertEqual(response.status_code, 403)
  1076. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/2/')
  1077. self.assertEqual(response.status_code, 200)
  1078. response = self.client.post('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/2/', {'name': 'changed'})
  1079. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=2).name, 'changed')
  1080. self.assertRedirects(response, '/test_admin/admin/')
  1081. self.client.get('/test_admin/admin/logout/')
  1082. for login_dict in [self.joepublic_login, self.no_username_login]:
  1083. self.client.post(login_url, login_dict)
  1084. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/1/', follow=True)
  1085. self.assertEqual(response.status_code, 200)
  1086. self.assertContains(response, 'login-form')
  1087. response = self.client.post('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/1/', {'name': 'changed'}, follow=True)
  1088. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=1).name, 'odd id')
  1089. self.assertEqual(response.status_code, 200)
  1090. self.assertContains(response, 'login-form')
  1091. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/2/', follow=True)
  1092. self.assertEqual(response.status_code, 200)
  1093. self.assertContains(response, 'login-form')
  1094. response = self.client.post('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/2/', {'name': 'changed again'}, follow=True)
  1095. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=2).name, 'changed')
  1096. self.assertEqual(response.status_code, 200)
  1097. self.assertContains(response, 'login-form')
  1098. self.client.get('/test_admin/admin/logout/')
  1099. def testHistoryView(self):
  1100. """History view should restrict access."""
  1101. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  1102. # add user should not be able to view the list of article or change any of them
  1103. self.client.get('/test_admin/admin/')
  1104. self.client.post(login_url, self.adduser_login)
  1105. response = self.client.get('/test_admin/admin/admin_views/article/1/history/')
  1106. self.assertEqual(response.status_code, 403)
  1107. self.client.get('/test_admin/admin/logout/')
  1108. # change user can view all items and edit them
  1109. self.client.get('/test_admin/admin/')
  1110. self.client.post(login_url, self.changeuser_login)
  1111. response = self.client.get('/test_admin/admin/admin_views/article/1/history/')
  1112. self.assertEqual(response.status_code, 200)
  1113. # Test redirection when using row-level change permissions. Refs #11513.
  1114. RowLevelChangePermissionModel.objects.create(id=1, name="odd id")
  1115. RowLevelChangePermissionModel.objects.create(id=2, name="even id")
  1116. for login_dict in [self.super_login, self.changeuser_login, self.adduser_login, self.deleteuser_login]:
  1117. self.client.post(login_url, login_dict)
  1118. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/1/history/')
  1119. self.assertEqual(response.status_code, 403)
  1120. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/2/history/')
  1121. self.assertEqual(response.status_code, 200)
  1122. self.client.get('/test_admin/admin/logout/')
  1123. for login_dict in [self.joepublic_login, self.no_username_login]:
  1124. self.client.post(login_url, login_dict)
  1125. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/1/history/', follow=True)
  1126. self.assertEqual(response.status_code, 200)
  1127. self.assertContains(response, 'login-form')
  1128. response = self.client.get('/test_admin/admin/admin_views/rowlevelchangepermissionmodel/2/history/', follow=True)
  1129. self.assertEqual(response.status_code, 200)
  1130. self.assertContains(response, 'login-form')
  1131. self.client.get('/test_admin/admin/logout/')
  1132. def testConditionallyShowAddSectionLink(self):
  1133. """
  1134. The foreign key widget should only show the "add related" button if the
  1135. user has permission to add that related item.
  1136. """
  1137. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  1138. # Set up and log in user.
  1139. url = '/test_admin/admin/admin_views/article/add/'
  1140. add_link_text = ' class="add-another"'
  1141. self.client.get('/test_admin/admin/')
  1142. self.client.post(login_url, self.adduser_login)
  1143. # The add user can't add sections yet, so they shouldn't see the "add
  1144. # section" link.
  1145. response = self.client.get(url)
  1146. self.assertNotContains(response, add_link_text)
  1147. # Allow the add user to add sections too. Now they can see the "add
  1148. # section" link.
  1149. add_user = User.objects.get(username='adduser')
  1150. perm = get_perm(Section, get_permission_codename('add', Section._meta))
  1151. add_user.user_permissions.add(perm)
  1152. response = self.client.get(url)
  1153. self.assertContains(response, add_link_text)
  1154. def testCustomModelAdminTemplates(self):
  1155. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  1156. self.client.get('/test_admin/admin/')
  1157. self.client.post(login_url, self.super_login)
  1158. # Test custom change list template with custom extra context
  1159. response = self.client.get('/test_admin/admin/admin_views/customarticle/')
  1160. self.assertContains(response, "var hello = 'Hello!';")
  1161. self.assertTemplateUsed(response, 'custom_admin/change_list.html')
  1162. # Test custom add form template
  1163. response = self.client.get('/test_admin/admin/admin_views/customarticle/add/')
  1164. self.assertTemplateUsed(response, 'custom_admin/add_form.html')
  1165. # Add an article so we can test delete, change, and history views
  1166. post = self.client.post('/test_admin/admin/admin_views/customarticle/add/', {
  1167. 'content': '<p>great article</p>',
  1168. 'date_0': '2008-03-18',
  1169. 'date_1': '10:54:39'
  1170. })
  1171. self.assertRedirects(post, '/test_admin/admin/admin_views/customarticle/')
  1172. self.assertEqual(CustomArticle.objects.all().count(), 1)
  1173. article_pk = CustomArticle.objects.all()[0].pk
  1174. # Test custom delete, change, and object history templates
  1175. # Test custom change form template
  1176. response = self.client.get('/test_admin/admin/admin_views/customarticle/%d/' % article_pk)
  1177. self.assertTemplateUsed(response, 'custom_admin/change_form.html')
  1178. response = self.client.get('/test_admin/admin/admin_views/customarticle/%d/delete/' % article_pk)
  1179. self.assertTemplateUsed(response, 'custom_admin/delete_confirmation.html')
  1180. response = self.client.post('/test_admin/admin/admin_views/customarticle/', data={
  1181. 'index': 0,
  1182. 'action': ['delete_selected'],
  1183. '_selected_action': ['1'],
  1184. })
  1185. self.assertTemplateUsed(response, 'custom_admin/delete_selected_confirmation.html')
  1186. response = self.client.get('/test_admin/admin/admin_views/customarticle/%d/history/' % article_pk)
  1187. self.assertTemplateUsed(response, 'custom_admin/object_history.html')
  1188. self.client.get('/test_admin/admin/logout/')
  1189. def testDeleteView(self):
  1190. """Delete view should restrict access and actually delete items."""
  1191. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  1192. delete_dict = {'post': 'yes'}
  1193. # add user should not be able to delete articles
  1194. self.client.get('/test_admin/admin/')
  1195. self.client.post(login_url, self.adduser_login)
  1196. response = self.client.get('/test_admin/admin/admin_views/article/1/delete/')
  1197. self.assertEqual(response.status_code, 403)
  1198. post = self.client.post('/test_admin/admin/admin_views/article/1/delete/', delete_dict)
  1199. self.assertEqual(post.status_code, 403)
  1200. self.assertEqual(Article.objects.all().count(), 3)
  1201. self.client.get('/test_admin/admin/logout/')
  1202. # Delete user can delete
  1203. self.client.get('/test_admin/admin/')
  1204. self.client.post(login_url, self.deleteuser_login)
  1205. response = self.client.get('/test_admin/admin/admin_views/section/1/delete/')
  1206. # test response contains link to related Article
  1207. self.assertContains(response, "admin_views/article/1/")
  1208. response = self.client.get('/test_admin/admin/admin_views/article/1/delete/')
  1209. self.assertEqual(response.status_code, 200)
  1210. post = self.client.post('/test_admin/admin/admin_views/article/1/delete/', delete_dict)
  1211. self.assertRedirects(post, '/test_admin/admin/')
  1212. self.assertEqual(Article.objects.all().count(), 2)
  1213. self.assertEqual(len(mail.outbox), 1)
  1214. self.assertEqual(mail.outbox[0].subject, 'Greetings from a deleted object')
  1215. article_ct = ContentType.objects.get_for_model(Article)
  1216. logged = LogEntry.objects.get(content_type=article_ct, action_flag=DELETION)
  1217. self.assertEqual(logged.object_id, '1')
  1218. self.client.get('/test_admin/admin/logout/')
  1219. def testDisabledPermissionsWhenLoggedIn(self):
  1220. self.client.login(username='super', password='secret')
  1221. superuser = User.objects.get(username='super')
  1222. superuser.is_active = False
  1223. superuser.save()
  1224. response = self.client.get('/test_admin/admin/', follow=True)
  1225. self.assertContains(response, 'id="login-form"')
  1226. self.assertNotContains(response, 'Log out')
  1227. response = self.client.get('/test_admin/admin/secure-view/', follow=True)
  1228. self.assertContains(response, 'id="login-form"')
  1229. def testDisabledStaffPermissionsWhenLoggedIn(self):
  1230. self.client.login(username='super', password='secret')
  1231. superuser = User.objects.get(username='super')
  1232. superuser.is_staff = False
  1233. superuser.save()
  1234. response = self.client.get('/test_admin/admin/', follow=True)
  1235. self.assertContains(response, 'id="login-form"')
  1236. self.assertNotContains(response, 'Log out')
  1237. response = self.client.get('/test_admin/admin/secure-view/', follow=True)
  1238. self.assertContains(response, 'id="login-form"')
  1239. def testAppIndexFailEarly(self):
  1240. """
  1241. If a user has no module perms, avoid iterating over all the modeladmins
  1242. in the registry.
  1243. """
  1244. login_url = reverse('admin:login') + '?next=/test_admin/admin/'
  1245. opts = Article._meta
  1246. change_user = User.objects.get(username='changeuser')
  1247. permission = get_perm(Article, get_permission_codename('change', opts))
  1248. self.client.post(login_url, self.changeuser_login)
  1249. # the user has no module permissions, because this module doesn't exist
  1250. change_user.user_permissions.remove(permission)
  1251. response = self.client.get('/test_admin/admin/admin_views/')
  1252. self.assertEqual(response.status_code, 403)
  1253. # the user now has module permissions
  1254. change_user.user_permissions.add(permission)
  1255. response = self.client.get('/test_admin/admin/admin_views/')
  1256. self.assertEqual(response.status_code, 200)
  1257. def test_shortcut_view_only_available_to_staff(self):
  1258. """
  1259. Only admin users should be able to use the admin shortcut view.
  1260. """
  1261. model_ctype = ContentType.objects.get_for_model(ModelWithStringPrimaryKey)
  1262. obj = ModelWithStringPrimaryKey.objects.create(string_pk='foo')
  1263. shortcut_url = "/test_admin/admin/r/%s/%s/" % (model_ctype.pk, obj.pk)
  1264. # Not logged in: we should see the login page.
  1265. response = self.client.get(shortcut_url, follow=True)
  1266. self.assertTemplateUsed(response, 'admin/login.html')
  1267. # Logged in? Redirect.
  1268. self.client.login(username='super', password='secret')
  1269. response = self.client.get(shortcut_url, follow=False)
  1270. # Can't use self.assertRedirects() because User.get_absolute_url() is silly.
  1271. self.assertEqual(response.status_code, 302)
  1272. self.assertEqual(response.url, 'http://example.com/dummy/foo/')
  1273. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1274. class AdminViewsNoUrlTest(TestCase):
  1275. """Regression test for #17333"""
  1276. urls = "admin_views.urls"
  1277. fixtures = ['admin-views-users.xml']
  1278. def setUp(self):
  1279. opts = Report._meta
  1280. # User who can change Reports
  1281. change_user = User.objects.get(username='changeuser')
  1282. change_user.user_permissions.add(get_perm(Report,
  1283. get_permission_codename('change', opts)))
  1284. # login POST dict
  1285. self.changeuser_login = {
  1286. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  1287. 'username': 'changeuser',
  1288. 'password': 'secret',
  1289. }
  1290. def test_no_standard_modeladmin_urls(self):
  1291. """Admin index views don't break when user's ModelAdmin removes standard urls"""
  1292. self.client.get('/test_admin/admin/')
  1293. r = self.client.post(reverse('admin:login'), self.changeuser_login)
  1294. r = self.client.get('/test_admin/admin/')
  1295. # we shouldn' get an 500 error caused by a NoReverseMatch
  1296. self.assertEqual(r.status_code, 200)
  1297. self.client.get('/test_admin/admin/logout/')
  1298. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1299. class AdminViewDeletedObjectsTest(TestCase):
  1300. urls = "admin_views.urls"
  1301. fixtures = ['admin-views-users.xml', 'deleted-objects.xml']
  1302. def setUp(self):
  1303. self.client.login(username='super', password='secret')
  1304. def tearDown(self):
  1305. self.client.logout()
  1306. def test_nesting(self):
  1307. """
  1308. Objects should be nested to display the relationships that
  1309. cause them to be scheduled for deletion.
  1310. """
  1311. pattern = re.compile(br"""<li>Plot: <a href=".+/admin_views/plot/1/">World Domination</a>\s*<ul>\s*<li>Plot details: <a href=".+/admin_views/plotdetails/1/">almost finished</a>""")
  1312. response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(1))
  1313. six.assertRegex(self, response.content, pattern)
  1314. def test_cyclic(self):
  1315. """
  1316. Cyclic relationships should still cause each object to only be
  1317. listed once.
  1318. """
  1319. one = """<li>Cyclic one: <a href="/test_admin/admin/admin_views/cyclicone/1/">I am recursive</a>"""
  1320. two = """<li>Cyclic two: <a href="/test_admin/admin/admin_views/cyclictwo/1/">I am recursive too</a>"""
  1321. response = self.client.get('/test_admin/admin/admin_views/cyclicone/%s/delete/' % quote(1))
  1322. self.assertContains(response, one, 1)
  1323. self.assertContains(response, two, 1)
  1324. def test_perms_needed(self):
  1325. self.client.logout()
  1326. delete_user = User.objects.get(username='deleteuser')
  1327. delete_user.user_permissions.add(get_perm(Plot,
  1328. get_permission_codename('delete', Plot._meta)))
  1329. self.assertTrue(self.client.login(username='deleteuser',
  1330. password='secret'))
  1331. response = self.client.get('/test_admin/admin/admin_views/plot/%s/delete/' % quote(1))
  1332. self.assertContains(response, "your account doesn't have permission to delete the following types of objects")
  1333. self.assertContains(response, "<li>plot details</li>")
  1334. def test_protected(self):
  1335. q = Question.objects.create(question="Why?")
  1336. a1 = Answer.objects.create(question=q, answer="Because.")
  1337. a2 = Answer.objects.create(question=q, answer="Yes.")
  1338. response = self.client.get("/test_admin/admin/admin_views/question/%s/delete/" % quote(q.pk))
  1339. self.assertContains(response, "would require deleting the following protected related objects")
  1340. self.assertContains(response, '<li>Answer: <a href="/test_admin/admin/admin_views/answer/%s/">Because.</a></li>' % a1.pk)
  1341. self.assertContains(response, '<li>Answer: <a href="/test_admin/admin/admin_views/answer/%s/">Yes.</a></li>' % a2.pk)
  1342. def test_not_registered(self):
  1343. should_contain = """<li>Secret hideout: underground bunker"""
  1344. response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(1))
  1345. self.assertContains(response, should_contain, 1)
  1346. def test_multiple_fkeys_to_same_model(self):
  1347. """
  1348. If a deleted object has two relationships from another model,
  1349. both of those should be followed in looking for related
  1350. objects to delete.
  1351. """
  1352. should_contain = """<li>Plot: <a href="/test_admin/admin/admin_views/plot/1/">World Domination</a>"""
  1353. response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(1))
  1354. self.assertContains(response, should_contain)
  1355. response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(2))
  1356. self.assertContains(response, should_contain)
  1357. def test_multiple_fkeys_to_same_instance(self):
  1358. """
  1359. If a deleted object has two relationships pointing to it from
  1360. another object, the other object should still only be listed
  1361. once.
  1362. """
  1363. should_contain = """<li>Plot: <a href="/test_admin/admin/admin_views/plot/2/">World Peace</a></li>"""
  1364. response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(2))
  1365. self.assertContains(response, should_contain, 1)
  1366. def test_inheritance(self):
  1367. """
  1368. In the case of an inherited model, if either the child or
  1369. parent-model instance is deleted, both instances are listed
  1370. for deletion, as well as any relationships they have.
  1371. """
  1372. should_contain = [
  1373. """<li>Villain: <a href="/test_admin/admin/admin_views/villain/3/">Bob</a>""",
  1374. """<li>Super villain: <a href="/test_admin/admin/admin_views/supervillain/3/">Bob</a>""",
  1375. """<li>Secret hideout: floating castle""",
  1376. """<li>Super secret hideout: super floating castle!"""
  1377. ]
  1378. response = self.client.get('/test_admin/admin/admin_views/villain/%s/delete/' % quote(3))
  1379. for should in should_contain:
  1380. self.assertContains(response, should, 1)
  1381. response = self.client.get('/test_admin/admin/admin_views/supervillain/%s/delete/' % quote(3))
  1382. for should in should_contain:
  1383. self.assertContains(response, should, 1)
  1384. def test_generic_relations(self):
  1385. """
  1386. If a deleted object has GenericForeignKeys pointing to it,
  1387. those objects should be listed for deletion.
  1388. """
  1389. plot = Plot.objects.get(pk=3)
  1390. FunkyTag.objects.create(content_object=plot, name='hott')
  1391. should_contain = """<li>Funky tag: hott"""
  1392. response = self.client.get('/test_admin/admin/admin_views/plot/%s/delete/' % quote(3))
  1393. self.assertContains(response, should_contain)
  1394. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1395. class AdminViewStringPrimaryKeyTest(TestCase):
  1396. urls = "admin_views.urls"
  1397. fixtures = ['admin-views-users.xml', 'string-primary-key.xml']
  1398. def __init__(self, *args):
  1399. super(AdminViewStringPrimaryKeyTest, self).__init__(*args)
  1400. self.pk = """abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 -_.!~*'() ;/?:@&=+$, <>#%" {}|\^[]`"""
  1401. def setUp(self):
  1402. self.client.login(username='super', password='secret')
  1403. content_type_pk = ContentType.objects.get_for_model(ModelWithStringPrimaryKey).pk
  1404. LogEntry.objects.log_action(100, content_type_pk, self.pk, self.pk, 2, change_message='Changed something')
  1405. def tearDown(self):
  1406. self.client.logout()
  1407. def test_get_history_view(self):
  1408. """
  1409. Retrieving the history for an object using urlencoded form of primary
  1410. key should work.
  1411. Refs #12349, #18550.
  1412. """
  1413. response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/history/' % quote(self.pk))
  1414. self.assertContains(response, escape(self.pk))
  1415. self.assertContains(response, 'Changed something')
  1416. self.assertEqual(response.status_code, 200)
  1417. def test_get_change_view(self):
  1418. "Retrieving the object using urlencoded form of primary key should work"
  1419. response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(self.pk))
  1420. self.assertContains(response, escape(self.pk))
  1421. self.assertEqual(response.status_code, 200)
  1422. def test_changelist_to_changeform_link(self):
  1423. "Link to the changeform of the object in changelist should use reverse() and be quoted -- #18072"
  1424. prefix = '/test_admin/admin/admin_views/modelwithstringprimarykey/'
  1425. response = self.client.get(prefix)
  1426. # this URL now comes through reverse(), thus url quoting and iri_to_uri encoding
  1427. pk_final_url = escape(iri_to_uri(urlquote(quote(self.pk))))
  1428. should_contain = """<th class="field-__str__"><a href="%s%s/">%s</a></th>""" % (prefix, pk_final_url, escape(self.pk))
  1429. self.assertContains(response, should_contain)
  1430. def test_recentactions_link(self):
  1431. "The link from the recent actions list referring to the changeform of the object should be quoted"
  1432. response = self.client.get('/test_admin/admin/')
  1433. link = reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(self.pk),))
  1434. should_contain = """<a href="%s">%s</a>""" % (link, escape(self.pk))
  1435. self.assertContains(response, should_contain)
  1436. def test_recentactions_without_content_type(self):
  1437. "If a LogEntry is missing content_type it will not display it in span tag under the hyperlink."
  1438. response = self.client.get('/test_admin/admin/')
  1439. link = reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(self.pk),))
  1440. should_contain = """<a href="%s">%s</a>""" % (link, escape(self.pk))
  1441. self.assertContains(response, should_contain)
  1442. should_contain = "Model with string primary key" # capitalized in Recent Actions
  1443. self.assertContains(response, should_contain)
  1444. logentry = LogEntry.objects.get(content_type__name__iexact=should_contain)
  1445. # http://code.djangoproject.com/ticket/10275
  1446. # if the log entry doesn't have a content type it should still be
  1447. # possible to view the Recent Actions part
  1448. logentry.content_type = None
  1449. logentry.save()
  1450. counted_presence_before = response.content.count(force_bytes(should_contain))
  1451. response = self.client.get('/test_admin/admin/')
  1452. counted_presence_after = response.content.count(force_bytes(should_contain))
  1453. self.assertEqual(counted_presence_before - 1,
  1454. counted_presence_after)
  1455. def test_logentry_get_admin_url(self):
  1456. "LogEntry.get_admin_url returns a URL to edit the entry's object or None for non-existent (possibly deleted) models"
  1457. log_entry_name = "Model with string primary key" # capitalized in Recent Actions
  1458. logentry = LogEntry.objects.get(content_type__name__iexact=log_entry_name)
  1459. model = "modelwithstringprimarykey"
  1460. desired_admin_url = "/test_admin/admin/admin_views/%s/%s/" % (model, escape(iri_to_uri(urlquote(quote(self.pk)))))
  1461. self.assertEqual(logentry.get_admin_url(), desired_admin_url)
  1462. logentry.content_type.model = "non-existent"
  1463. self.assertEqual(logentry.get_admin_url(), None)
  1464. def test_deleteconfirmation_link(self):
  1465. "The link from the delete confirmation page referring back to the changeform of the object should be quoted"
  1466. response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/delete/' % quote(self.pk))
  1467. # this URL now comes through reverse(), thus url quoting and iri_to_uri encoding
  1468. should_contain = """/%s/">%s</a>""" % (escape(iri_to_uri(urlquote(quote(self.pk)))), escape(self.pk))
  1469. self.assertContains(response, should_contain)
  1470. def test_url_conflicts_with_add(self):
  1471. "A model with a primary key that ends with add should be visible"
  1472. add_model = ModelWithStringPrimaryKey(pk="i have something to add")
  1473. add_model.save()
  1474. response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(add_model.pk))
  1475. should_contain = """<h1>Change model with string primary key</h1>"""
  1476. self.assertContains(response, should_contain)
  1477. def test_url_conflicts_with_delete(self):
  1478. "A model with a primary key that ends with delete should be visible"
  1479. delete_model = ModelWithStringPrimaryKey(pk="delete")
  1480. delete_model.save()
  1481. response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(delete_model.pk))
  1482. should_contain = """<h1>Change model with string primary key</h1>"""
  1483. self.assertContains(response, should_contain)
  1484. def test_url_conflicts_with_history(self):
  1485. "A model with a primary key that ends with history should be visible"
  1486. history_model = ModelWithStringPrimaryKey(pk="history")
  1487. history_model.save()
  1488. response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(history_model.pk))
  1489. should_contain = """<h1>Change model with string primary key</h1>"""
  1490. self.assertContains(response, should_contain)
  1491. def test_shortcut_view_with_escaping(self):
  1492. "'View on site should' work properly with char fields"
  1493. model = ModelWithStringPrimaryKey(pk='abc_123')
  1494. model.save()
  1495. response = self.client.get('/test_admin/admin/admin_views/modelwithstringprimarykey/%s/' % quote(model.pk))
  1496. should_contain = '/%s/" class="viewsitelink">' % model.pk
  1497. self.assertContains(response, should_contain)
  1498. def test_change_view_history_link(self):
  1499. """Object history button link should work and contain the pk value quoted."""
  1500. url = reverse('admin:%s_modelwithstringprimarykey_change' %
  1501. ModelWithStringPrimaryKey._meta.app_label,
  1502. args=(quote(self.pk),))
  1503. response = self.client.get(url)
  1504. self.assertEqual(response.status_code, 200)
  1505. expected_link = reverse('admin:%s_modelwithstringprimarykey_history' %
  1506. ModelWithStringPrimaryKey._meta.app_label,
  1507. args=(quote(self.pk),))
  1508. self.assertContains(response, '<a href="%s" class="historylink"' % expected_link)
  1509. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1510. class SecureViewTests(TestCase):
  1511. """
  1512. Test behavior of a view protected by the staff_member_required decorator.
  1513. """
  1514. urls = "admin_views.urls"
  1515. fixtures = ['admin-views-users.xml']
  1516. def tearDown(self):
  1517. self.client.logout()
  1518. def test_secure_view_shows_login_if_not_logged_in(self):
  1519. """
  1520. Ensure that we see the admin login form.
  1521. """
  1522. secure_url = '/test_admin/admin/secure-view/'
  1523. response = self.client.get(secure_url)
  1524. self.assertRedirects(response, '%s?next=%s' % (reverse('admin:login'), secure_url))
  1525. response = self.client.get(secure_url, follow=True)
  1526. self.assertTemplateUsed(response, 'admin/login.html')
  1527. self.assertEqual(response.context[REDIRECT_FIELD_NAME], secure_url)
  1528. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1529. class AdminViewUnicodeTest(TestCase):
  1530. urls = "admin_views.urls"
  1531. fixtures = ['admin-views-unicode.xml']
  1532. def setUp(self):
  1533. self.client.login(username='super', password='secret')
  1534. def tearDown(self):
  1535. self.client.logout()
  1536. def testUnicodeEdit(self):
  1537. """
  1538. A test to ensure that POST on edit_view handles non-ASCII characters.
  1539. """
  1540. post_data = {
  1541. "name": "Test lærdommer",
  1542. # inline data
  1543. "chapter_set-TOTAL_FORMS": "6",
  1544. "chapter_set-INITIAL_FORMS": "3",
  1545. "chapter_set-MAX_NUM_FORMS": "0",
  1546. "chapter_set-0-id": "1",
  1547. "chapter_set-0-title": "Norske bostaver æøå skaper problemer",
  1548. "chapter_set-0-content": "&lt;p&gt;Svært frustrerende med UnicodeDecodeError&lt;/p&gt;",
  1549. "chapter_set-1-id": "2",
  1550. "chapter_set-1-title": "Kjærlighet.",
  1551. "chapter_set-1-content": "&lt;p&gt;La kjærligheten til de lidende seire.&lt;/p&gt;",
  1552. "chapter_set-2-id": "3",
  1553. "chapter_set-2-title": "Need a title.",
  1554. "chapter_set-2-content": "&lt;p&gt;Newest content&lt;/p&gt;",
  1555. "chapter_set-3-id": "",
  1556. "chapter_set-3-title": "",
  1557. "chapter_set-3-content": "",
  1558. "chapter_set-4-id": "",
  1559. "chapter_set-4-title": "",
  1560. "chapter_set-4-content": "",
  1561. "chapter_set-5-id": "",
  1562. "chapter_set-5-title": "",
  1563. "chapter_set-5-content": "",
  1564. }
  1565. response = self.client.post('/test_admin/admin/admin_views/book/1/', post_data)
  1566. self.assertEqual(response.status_code, 302) # redirect somewhere
  1567. def testUnicodeDelete(self):
  1568. """
  1569. Ensure that the delete_view handles non-ASCII characters
  1570. """
  1571. delete_dict = {'post': 'yes'}
  1572. response = self.client.get('/test_admin/admin/admin_views/book/1/delete/')
  1573. self.assertEqual(response.status_code, 200)
  1574. response = self.client.post('/test_admin/admin/admin_views/book/1/delete/', delete_dict)
  1575. self.assertRedirects(response, '/test_admin/admin/admin_views/book/')
  1576. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1577. class AdminViewListEditable(TestCase):
  1578. urls = "admin_views.urls"
  1579. fixtures = ['admin-views-users.xml', 'admin-views-person.xml']
  1580. def setUp(self):
  1581. self.client.login(username='super', password='secret')
  1582. def tearDown(self):
  1583. self.client.logout()
  1584. def test_inheritance(self):
  1585. Podcast.objects.create(name="This Week in Django",
  1586. release_date=datetime.date.today())
  1587. response = self.client.get('/test_admin/admin/admin_views/podcast/')
  1588. self.assertEqual(response.status_code, 200)
  1589. def test_inheritance_2(self):
  1590. Vodcast.objects.create(name="This Week in Django", released=True)
  1591. response = self.client.get('/test_admin/admin/admin_views/vodcast/')
  1592. self.assertEqual(response.status_code, 200)
  1593. def test_custom_pk(self):
  1594. Language.objects.create(iso='en', name='English', english_name='English')
  1595. response = self.client.get('/test_admin/admin/admin_views/language/')
  1596. self.assertEqual(response.status_code, 200)
  1597. def test_changelist_input_html(self):
  1598. response = self.client.get('/test_admin/admin/admin_views/person/')
  1599. # 2 inputs per object(the field and the hidden id field) = 6
  1600. # 4 management hidden fields = 4
  1601. # 4 action inputs (3 regular checkboxes, 1 checkbox to select all)
  1602. # main form submit button = 1
  1603. # search field and search submit button = 2
  1604. # CSRF field = 1
  1605. # field to track 'select all' across paginated views = 1
  1606. # 6 + 4 + 4 + 1 + 2 + 1 + 1 = 19 inputs
  1607. self.assertContains(response, "<input", count=19)
  1608. # 1 select per object = 3 selects
  1609. self.assertContains(response, "<select", count=4)
  1610. def test_post_messages(self):
  1611. # Ticket 12707: Saving inline editable should not show admin
  1612. # action warnings
  1613. data = {
  1614. "form-TOTAL_FORMS": "3",
  1615. "form-INITIAL_FORMS": "3",
  1616. "form-MAX_NUM_FORMS": "0",
  1617. "form-0-gender": "1",
  1618. "form-0-id": "1",
  1619. "form-1-gender": "2",
  1620. "form-1-id": "2",
  1621. "form-2-alive": "checked",
  1622. "form-2-gender": "1",
  1623. "form-2-id": "3",
  1624. "_save": "Save",
  1625. }
  1626. response = self.client.post('/test_admin/admin/admin_views/person/',
  1627. data, follow=True)
  1628. self.assertEqual(len(response.context['messages']), 1)
  1629. def test_post_submission(self):
  1630. data = {
  1631. "form-TOTAL_FORMS": "3",
  1632. "form-INITIAL_FORMS": "3",
  1633. "form-MAX_NUM_FORMS": "0",
  1634. "form-0-gender": "1",
  1635. "form-0-id": "1",
  1636. "form-1-gender": "2",
  1637. "form-1-id": "2",
  1638. "form-2-alive": "checked",
  1639. "form-2-gender": "1",
  1640. "form-2-id": "3",
  1641. "_save": "Save",
  1642. }
  1643. self.client.post('/test_admin/admin/admin_views/person/', data)
  1644. self.assertEqual(Person.objects.get(name="John Mauchly").alive, False)
  1645. self.assertEqual(Person.objects.get(name="Grace Hopper").gender, 2)
  1646. # test a filtered page
  1647. data = {
  1648. "form-TOTAL_FORMS": "2",
  1649. "form-INITIAL_FORMS": "2",
  1650. "form-MAX_NUM_FORMS": "0",
  1651. "form-0-id": "1",
  1652. "form-0-gender": "1",
  1653. "form-0-alive": "checked",
  1654. "form-1-id": "3",
  1655. "form-1-gender": "1",
  1656. "form-1-alive": "checked",
  1657. "_save": "Save",
  1658. }
  1659. self.client.post('/test_admin/admin/admin_views/person/?gender__exact=1', data)
  1660. self.assertEqual(Person.objects.get(name="John Mauchly").alive, True)
  1661. # test a searched page
  1662. data = {
  1663. "form-TOTAL_FORMS": "1",
  1664. "form-INITIAL_FORMS": "1",
  1665. "form-MAX_NUM_FORMS": "0",
  1666. "form-0-id": "1",
  1667. "form-0-gender": "1",
  1668. "_save": "Save",
  1669. }
  1670. self.client.post('/test_admin/admin/admin_views/person/?q=john', data)
  1671. self.assertEqual(Person.objects.get(name="John Mauchly").alive, False)
  1672. def test_non_field_errors(self):
  1673. ''' Ensure that non field errors are displayed for each of the
  1674. forms in the changelist's formset. Refs #13126.
  1675. '''
  1676. fd1 = FoodDelivery.objects.create(reference='123', driver='bill', restaurant='thai')
  1677. fd2 = FoodDelivery.objects.create(reference='456', driver='bill', restaurant='india')
  1678. fd3 = FoodDelivery.objects.create(reference='789', driver='bill', restaurant='pizza')
  1679. data = {
  1680. "form-TOTAL_FORMS": "3",
  1681. "form-INITIAL_FORMS": "3",
  1682. "form-MAX_NUM_FORMS": "0",
  1683. "form-0-id": str(fd1.id),
  1684. "form-0-reference": "123",
  1685. "form-0-driver": "bill",
  1686. "form-0-restaurant": "thai",
  1687. # Same data as above: Forbidden because of unique_together!
  1688. "form-1-id": str(fd2.id),
  1689. "form-1-reference": "456",
  1690. "form-1-driver": "bill",
  1691. "form-1-restaurant": "thai",
  1692. "form-2-id": str(fd3.id),
  1693. "form-2-reference": "789",
  1694. "form-2-driver": "bill",
  1695. "form-2-restaurant": "pizza",
  1696. "_save": "Save",
  1697. }
  1698. response = self.client.post('/test_admin/admin/admin_views/fooddelivery/', data)
  1699. self.assertContains(response, '<tr><td colspan="4"><ul class="errorlist"><li>Food delivery with this Driver and Restaurant already exists.</li></ul></td></tr>', 1, html=True)
  1700. data = {
  1701. "form-TOTAL_FORMS": "3",
  1702. "form-INITIAL_FORMS": "3",
  1703. "form-MAX_NUM_FORMS": "0",
  1704. "form-0-id": str(fd1.id),
  1705. "form-0-reference": "123",
  1706. "form-0-driver": "bill",
  1707. "form-0-restaurant": "thai",
  1708. # Same data as above: Forbidden because of unique_together!
  1709. "form-1-id": str(fd2.id),
  1710. "form-1-reference": "456",
  1711. "form-1-driver": "bill",
  1712. "form-1-restaurant": "thai",
  1713. # Same data also.
  1714. "form-2-id": str(fd3.id),
  1715. "form-2-reference": "789",
  1716. "form-2-driver": "bill",
  1717. "form-2-restaurant": "thai",
  1718. "_save": "Save",
  1719. }
  1720. response = self.client.post('/test_admin/admin/admin_views/fooddelivery/', data)
  1721. self.assertContains(response, '<tr><td colspan="4"><ul class="errorlist"><li>Food delivery with this Driver and Restaurant already exists.</li></ul></td></tr>', 2, html=True)
  1722. def test_non_form_errors(self):
  1723. # test if non-form errors are handled; ticket #12716
  1724. data = {
  1725. "form-TOTAL_FORMS": "1",
  1726. "form-INITIAL_FORMS": "1",
  1727. "form-MAX_NUM_FORMS": "0",
  1728. "form-0-id": "2",
  1729. "form-0-alive": "1",
  1730. "form-0-gender": "2",
  1731. # Ensure that the form processing understands this as a list_editable "Save"
  1732. # and not an action "Go".
  1733. "_save": "Save",
  1734. }
  1735. response = self.client.post('/test_admin/admin/admin_views/person/', data)
  1736. self.assertContains(response, "Grace is not a Zombie")
  1737. def test_non_form_errors_is_errorlist(self):
  1738. # test if non-form errors are correctly handled; ticket #12878
  1739. data = {
  1740. "form-TOTAL_FORMS": "1",
  1741. "form-INITIAL_FORMS": "1",
  1742. "form-MAX_NUM_FORMS": "0",
  1743. "form-0-id": "2",
  1744. "form-0-alive": "1",
  1745. "form-0-gender": "2",
  1746. "_save": "Save",
  1747. }
  1748. response = self.client.post('/test_admin/admin/admin_views/person/', data)
  1749. non_form_errors = response.context['cl'].formset.non_form_errors()
  1750. self.assertIsInstance(non_form_errors, ErrorList)
  1751. self.assertEqual(str(non_form_errors), str(ErrorList(["Grace is not a Zombie"])))
  1752. def test_list_editable_ordering(self):
  1753. collector = Collector.objects.create(id=1, name="Frederick Clegg")
  1754. Category.objects.create(id=1, order=1, collector=collector)
  1755. Category.objects.create(id=2, order=2, collector=collector)
  1756. Category.objects.create(id=3, order=0, collector=collector)
  1757. Category.objects.create(id=4, order=0, collector=collector)
  1758. # NB: The order values must be changed so that the items are reordered.
  1759. data = {
  1760. "form-TOTAL_FORMS": "4",
  1761. "form-INITIAL_FORMS": "4",
  1762. "form-MAX_NUM_FORMS": "0",
  1763. "form-0-order": "14",
  1764. "form-0-id": "1",
  1765. "form-0-collector": "1",
  1766. "form-1-order": "13",
  1767. "form-1-id": "2",
  1768. "form-1-collector": "1",
  1769. "form-2-order": "1",
  1770. "form-2-id": "3",
  1771. "form-2-collector": "1",
  1772. "form-3-order": "0",
  1773. "form-3-id": "4",
  1774. "form-3-collector": "1",
  1775. # Ensure that the form processing understands this as a list_editable "Save"
  1776. # and not an action "Go".
  1777. "_save": "Save",
  1778. }
  1779. response = self.client.post('/test_admin/admin/admin_views/category/', data)
  1780. # Successful post will redirect
  1781. self.assertEqual(response.status_code, 302)
  1782. # Check that the order values have been applied to the right objects
  1783. self.assertEqual(Category.objects.get(id=1).order, 14)
  1784. self.assertEqual(Category.objects.get(id=2).order, 13)
  1785. self.assertEqual(Category.objects.get(id=3).order, 1)
  1786. self.assertEqual(Category.objects.get(id=4).order, 0)
  1787. def test_list_editable_pagination(self):
  1788. """
  1789. Ensure that pagination works for list_editable items.
  1790. Refs #16819.
  1791. """
  1792. UnorderedObject.objects.create(id=1, name='Unordered object #1')
  1793. UnorderedObject.objects.create(id=2, name='Unordered object #2')
  1794. UnorderedObject.objects.create(id=3, name='Unordered object #3')
  1795. response = self.client.get('/test_admin/admin/admin_views/unorderedobject/')
  1796. self.assertContains(response, 'Unordered object #3')
  1797. self.assertContains(response, 'Unordered object #2')
  1798. self.assertNotContains(response, 'Unordered object #1')
  1799. response = self.client.get('/test_admin/admin/admin_views/unorderedobject/?p=1')
  1800. self.assertNotContains(response, 'Unordered object #3')
  1801. self.assertNotContains(response, 'Unordered object #2')
  1802. self.assertContains(response, 'Unordered object #1')
  1803. def test_list_editable_action_submit(self):
  1804. # List editable changes should not be executed if the action "Go" button is
  1805. # used to submit the form.
  1806. data = {
  1807. "form-TOTAL_FORMS": "3",
  1808. "form-INITIAL_FORMS": "3",
  1809. "form-MAX_NUM_FORMS": "0",
  1810. "form-0-gender": "1",
  1811. "form-0-id": "1",
  1812. "form-1-gender": "2",
  1813. "form-1-id": "2",
  1814. "form-2-alive": "checked",
  1815. "form-2-gender": "1",
  1816. "form-2-id": "3",
  1817. "index": "0",
  1818. "_selected_action": ['3'],
  1819. "action": ['', 'delete_selected'],
  1820. }
  1821. self.client.post('/test_admin/admin/admin_views/person/', data)
  1822. self.assertEqual(Person.objects.get(name="John Mauchly").alive, True)
  1823. self.assertEqual(Person.objects.get(name="Grace Hopper").gender, 1)
  1824. def test_list_editable_action_choices(self):
  1825. # List editable changes should be executed if the "Save" button is
  1826. # used to submit the form - any action choices should be ignored.
  1827. data = {
  1828. "form-TOTAL_FORMS": "3",
  1829. "form-INITIAL_FORMS": "3",
  1830. "form-MAX_NUM_FORMS": "0",
  1831. "form-0-gender": "1",
  1832. "form-0-id": "1",
  1833. "form-1-gender": "2",
  1834. "form-1-id": "2",
  1835. "form-2-alive": "checked",
  1836. "form-2-gender": "1",
  1837. "form-2-id": "3",
  1838. "_save": "Save",
  1839. "_selected_action": ['1'],
  1840. "action": ['', 'delete_selected'],
  1841. }
  1842. self.client.post('/test_admin/admin/admin_views/person/', data)
  1843. self.assertEqual(Person.objects.get(name="John Mauchly").alive, False)
  1844. self.assertEqual(Person.objects.get(name="Grace Hopper").gender, 2)
  1845. def test_list_editable_popup(self):
  1846. """
  1847. Fields should not be list-editable in popups.
  1848. """
  1849. response = self.client.get('/test_admin/admin/admin_views/person/')
  1850. self.assertNotEqual(response.context['cl'].list_editable, ())
  1851. response = self.client.get('/test_admin/admin/admin_views/person/?%s' % IS_POPUP_VAR)
  1852. self.assertEqual(response.context['cl'].list_editable, ())
  1853. def test_pk_hidden_fields(self):
  1854. """ Ensure that hidden pk fields aren't displayed in the table body and
  1855. that their corresponding human-readable value is displayed instead.
  1856. Note that the hidden pk fields are in fact be displayed but
  1857. separately (not in the table), and only once.
  1858. Refs #12475.
  1859. """
  1860. story1 = Story.objects.create(title='The adventures of Guido', content='Once upon a time in Djangoland...')
  1861. story2 = Story.objects.create(title='Crouching Tiger, Hidden Python', content='The Python was sneaking into...')
  1862. response = self.client.get('/test_admin/admin/admin_views/story/')
  1863. self.assertContains(response, 'id="id_form-0-id"', 1) # Only one hidden field, in a separate place than the table.
  1864. self.assertContains(response, 'id="id_form-1-id"', 1)
  1865. self.assertContains(response, '<div class="hiddenfields">\n<input type="hidden" name="form-0-id" value="%d" id="id_form-0-id" /><input type="hidden" name="form-1-id" value="%d" id="id_form-1-id" />\n</div>' % (story2.id, story1.id), html=True)
  1866. self.assertContains(response, '<td class="field-id">%d</td>' % story1.id, 1)
  1867. self.assertContains(response, '<td class="field-id">%d</td>' % story2.id, 1)
  1868. def test_pk_hidden_fields_with_list_display_links(self):
  1869. """ Similarly as test_pk_hidden_fields, but when the hidden pk fields are
  1870. referenced in list_display_links.
  1871. Refs #12475.
  1872. """
  1873. story1 = OtherStory.objects.create(title='The adventures of Guido', content='Once upon a time in Djangoland...')
  1874. story2 = OtherStory.objects.create(title='Crouching Tiger, Hidden Python', content='The Python was sneaking into...')
  1875. link1 = reverse('admin:admin_views_otherstory_change', args=(story1.pk,))
  1876. link2 = reverse('admin:admin_views_otherstory_change', args=(story2.pk,))
  1877. response = self.client.get('/test_admin/admin/admin_views/otherstory/')
  1878. self.assertContains(response, 'id="id_form-0-id"', 1) # Only one hidden field, in a separate place than the table.
  1879. self.assertContains(response, 'id="id_form-1-id"', 1)
  1880. self.assertContains(response, '<div class="hiddenfields">\n<input type="hidden" name="form-0-id" value="%d" id="id_form-0-id" /><input type="hidden" name="form-1-id" value="%d" id="id_form-1-id" />\n</div>' % (story2.id, story1.id), html=True)
  1881. self.assertContains(response, '<th class="field-id"><a href="%s">%d</a></th>' % (link1, story1.id), 1)
  1882. self.assertContains(response, '<th class="field-id"><a href="%s">%d</a></th>' % (link2, story2.id), 1)
  1883. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1884. class AdminSearchTest(TestCase):
  1885. urls = "admin_views.urls"
  1886. fixtures = ['admin-views-users', 'multiple-child-classes',
  1887. 'admin-views-person']
  1888. def setUp(self):
  1889. self.client.login(username='super', password='secret')
  1890. def tearDown(self):
  1891. self.client.logout()
  1892. def test_search_on_sibling_models(self):
  1893. "Check that a search that mentions sibling models"
  1894. response = self.client.get('/test_admin/admin/admin_views/recommendation/?q=bar')
  1895. # confirm the search returned 1 object
  1896. self.assertContains(response, "\n1 recommendation\n")
  1897. def test_with_fk_to_field(self):
  1898. """Ensure that the to_field GET parameter is preserved when a search
  1899. is performed. Refs #10918.
  1900. """
  1901. from django.contrib.admin.views.main import TO_FIELD_VAR
  1902. response = self.client.get('/test_admin/admin/auth/user/?q=joe&%s=username' % TO_FIELD_VAR)
  1903. self.assertContains(response, "\n1 user\n")
  1904. self.assertContains(response, '<input type="hidden" name="_to_field" value="username"/>', html=True)
  1905. def test_exact_matches(self):
  1906. response = self.client.get('/test_admin/admin/admin_views/recommendation/?q=bar')
  1907. # confirm the search returned one object
  1908. self.assertContains(response, "\n1 recommendation\n")
  1909. response = self.client.get('/test_admin/admin/admin_views/recommendation/?q=ba')
  1910. # confirm the search returned zero objects
  1911. self.assertContains(response, "\n0 recommendations\n")
  1912. def test_beginning_matches(self):
  1913. response = self.client.get('/test_admin/admin/admin_views/person/?q=Gui')
  1914. # confirm the search returned one object
  1915. self.assertContains(response, "\n1 person\n")
  1916. self.assertContains(response, "Guido")
  1917. response = self.client.get('/test_admin/admin/admin_views/person/?q=uido')
  1918. # confirm the search returned zero objects
  1919. self.assertContains(response, "\n0 persons\n")
  1920. self.assertNotContains(response, "Guido")
  1921. def test_pluggable_search(self):
  1922. PluggableSearchPerson.objects.create(name="Bob", age=10)
  1923. PluggableSearchPerson.objects.create(name="Amy", age=20)
  1924. response = self.client.get('/test_admin/admin/admin_views/pluggablesearchperson/?q=Bob')
  1925. # confirm the search returned one object
  1926. self.assertContains(response, "\n1 pluggable search person\n")
  1927. self.assertContains(response, "Bob")
  1928. response = self.client.get('/test_admin/admin/admin_views/pluggablesearchperson/?q=20')
  1929. # confirm the search returned one object
  1930. self.assertContains(response, "\n1 pluggable search person\n")
  1931. self.assertContains(response, "Amy")
  1932. def test_reset_link(self):
  1933. """
  1934. Test presence of reset link in search bar ("1 result (_x total_)").
  1935. """
  1936. response = self.client.get('/test_admin/admin/admin_views/person/?q=Gui')
  1937. self.assertContains(response,
  1938. """<span class="small quiet">1 result (<a href="?">3 total</a>)</span>""",
  1939. html=True)
  1940. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  1941. class AdminInheritedInlinesTest(TestCase):
  1942. urls = "admin_views.urls"
  1943. fixtures = ['admin-views-users.xml']
  1944. def setUp(self):
  1945. self.client.login(username='super', password='secret')
  1946. def tearDown(self):
  1947. self.client.logout()
  1948. def testInline(self):
  1949. "Ensure that inline models which inherit from a common parent are correctly handled by admin."
  1950. foo_user = "foo username"
  1951. bar_user = "bar username"
  1952. name_re = re.compile(b'name="(.*?)"')
  1953. # test the add case
  1954. response = self.client.get('/test_admin/admin/admin_views/persona/add/')
  1955. names = name_re.findall(response.content)
  1956. # make sure we have no duplicate HTML names
  1957. self.assertEqual(len(names), len(set(names)))
  1958. # test the add case
  1959. post_data = {
  1960. "name": "Test Name",
  1961. # inline data
  1962. "accounts-TOTAL_FORMS": "1",
  1963. "accounts-INITIAL_FORMS": "0",
  1964. "accounts-MAX_NUM_FORMS": "0",
  1965. "accounts-0-username": foo_user,
  1966. "accounts-2-TOTAL_FORMS": "1",
  1967. "accounts-2-INITIAL_FORMS": "0",
  1968. "accounts-2-MAX_NUM_FORMS": "0",
  1969. "accounts-2-0-username": bar_user,
  1970. }
  1971. response = self.client.post('/test_admin/admin/admin_views/persona/add/', post_data)
  1972. self.assertEqual(response.status_code, 302) # redirect somewhere
  1973. self.assertEqual(Persona.objects.count(), 1)
  1974. self.assertEqual(FooAccount.objects.count(), 1)
  1975. self.assertEqual(BarAccount.objects.count(), 1)
  1976. self.assertEqual(FooAccount.objects.all()[0].username, foo_user)
  1977. self.assertEqual(BarAccount.objects.all()[0].username, bar_user)
  1978. self.assertEqual(Persona.objects.all()[0].accounts.count(), 2)
  1979. persona_id = Persona.objects.all()[0].id
  1980. foo_id = FooAccount.objects.all()[0].id
  1981. bar_id = BarAccount.objects.all()[0].id
  1982. # test the edit case
  1983. response = self.client.get('/test_admin/admin/admin_views/persona/%d/' % persona_id)
  1984. names = name_re.findall(response.content)
  1985. # make sure we have no duplicate HTML names
  1986. self.assertEqual(len(names), len(set(names)))
  1987. post_data = {
  1988. "name": "Test Name",
  1989. "accounts-TOTAL_FORMS": "2",
  1990. "accounts-INITIAL_FORMS": "1",
  1991. "accounts-MAX_NUM_FORMS": "0",
  1992. "accounts-0-username": "%s-1" % foo_user,
  1993. "accounts-0-account_ptr": str(foo_id),
  1994. "accounts-0-persona": str(persona_id),
  1995. "accounts-2-TOTAL_FORMS": "2",
  1996. "accounts-2-INITIAL_FORMS": "1",
  1997. "accounts-2-MAX_NUM_FORMS": "0",
  1998. "accounts-2-0-username": "%s-1" % bar_user,
  1999. "accounts-2-0-account_ptr": str(bar_id),
  2000. "accounts-2-0-persona": str(persona_id),
  2001. }
  2002. response = self.client.post('/test_admin/admin/admin_views/persona/%d/' % persona_id, post_data)
  2003. self.assertEqual(response.status_code, 302)
  2004. self.assertEqual(Persona.objects.count(), 1)
  2005. self.assertEqual(FooAccount.objects.count(), 1)
  2006. self.assertEqual(BarAccount.objects.count(), 1)
  2007. self.assertEqual(FooAccount.objects.all()[0].username, "%s-1" % foo_user)
  2008. self.assertEqual(BarAccount.objects.all()[0].username, "%s-1" % bar_user)
  2009. self.assertEqual(Persona.objects.all()[0].accounts.count(), 2)
  2010. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2011. class AdminActionsTest(TestCase):
  2012. urls = "admin_views.urls"
  2013. fixtures = ['admin-views-users.xml', 'admin-views-actions.xml']
  2014. def setUp(self):
  2015. self.client.login(username='super', password='secret')
  2016. def tearDown(self):
  2017. self.client.logout()
  2018. def test_model_admin_custom_action(self):
  2019. "Tests a custom action defined in a ModelAdmin method"
  2020. action_data = {
  2021. ACTION_CHECKBOX_NAME: [1],
  2022. 'action': 'mail_admin',
  2023. 'index': 0,
  2024. }
  2025. self.client.post('/test_admin/admin/admin_views/subscriber/', action_data)
  2026. self.assertEqual(len(mail.outbox), 1)
  2027. self.assertEqual(mail.outbox[0].subject, 'Greetings from a ModelAdmin action')
  2028. def test_model_admin_default_delete_action(self):
  2029. "Tests the default delete action defined as a ModelAdmin method"
  2030. action_data = {
  2031. ACTION_CHECKBOX_NAME: [1, 2],
  2032. 'action': 'delete_selected',
  2033. 'index': 0,
  2034. }
  2035. delete_confirmation_data = {
  2036. ACTION_CHECKBOX_NAME: [1, 2],
  2037. 'action': 'delete_selected',
  2038. 'post': 'yes',
  2039. }
  2040. confirmation = self.client.post('/test_admin/admin/admin_views/subscriber/', action_data)
  2041. self.assertIsInstance(confirmation, TemplateResponse)
  2042. self.assertContains(confirmation, "Are you sure you want to delete the selected subscribers?")
  2043. self.assertContains(confirmation, ACTION_CHECKBOX_NAME, count=2)
  2044. self.client.post('/test_admin/admin/admin_views/subscriber/', delete_confirmation_data)
  2045. self.assertEqual(Subscriber.objects.count(), 0)
  2046. @override_settings(USE_THOUSAND_SEPARATOR=True, USE_L10N=True)
  2047. def test_non_localized_pk(self):
  2048. """If USE_THOUSAND_SEPARATOR is set, make sure that the ids for
  2049. the objects selected for deletion are rendered without separators.
  2050. Refs #14895.
  2051. """
  2052. subscriber = Subscriber.objects.get(id=1)
  2053. subscriber.id = 9999
  2054. subscriber.save()
  2055. action_data = {
  2056. ACTION_CHECKBOX_NAME: [9999, 2],
  2057. 'action': 'delete_selected',
  2058. 'index': 0,
  2059. }
  2060. response = self.client.post('/test_admin/admin/admin_views/subscriber/', action_data)
  2061. self.assertTemplateUsed(response, 'admin/delete_selected_confirmation.html')
  2062. self.assertContains(response, 'value="9999"') # Instead of 9,999
  2063. self.assertContains(response, 'value="2"')
  2064. def test_model_admin_default_delete_action_protected(self):
  2065. """
  2066. Tests the default delete action defined as a ModelAdmin method in the
  2067. case where some related objects are protected from deletion.
  2068. """
  2069. q1 = Question.objects.create(question="Why?")
  2070. a1 = Answer.objects.create(question=q1, answer="Because.")
  2071. a2 = Answer.objects.create(question=q1, answer="Yes.")
  2072. q2 = Question.objects.create(question="Wherefore?")
  2073. action_data = {
  2074. ACTION_CHECKBOX_NAME: [q1.pk, q2.pk],
  2075. 'action': 'delete_selected',
  2076. 'index': 0,
  2077. }
  2078. response = self.client.post("/test_admin/admin/admin_views/question/", action_data)
  2079. self.assertContains(response, "would require deleting the following protected related objects")
  2080. self.assertContains(response, '<li>Answer: <a href="/test_admin/admin/admin_views/answer/%s/">Because.</a></li>' % a1.pk, html=True)
  2081. self.assertContains(response, '<li>Answer: <a href="/test_admin/admin/admin_views/answer/%s/">Yes.</a></li>' % a2.pk, html=True)
  2082. def test_model_admin_default_delete_action_no_change_url(self):
  2083. """
  2084. Default delete action shouldn't break if a user's ModelAdmin removes the url for change_view.
  2085. Regression test for #20640
  2086. """
  2087. obj = UnchangeableObject.objects.create()
  2088. action_data = {
  2089. ACTION_CHECKBOX_NAME: obj.pk,
  2090. "action": "delete_selected",
  2091. "index": "0",
  2092. }
  2093. response = self.client.post('/test_admin/admin/admin_views/unchangeableobject/', action_data)
  2094. # No 500 caused by NoReverseMatch
  2095. self.assertEqual(response.status_code, 200)
  2096. # The page shouldn't display a link to the nonexistent change page
  2097. self.assertContains(response, "<li>Unchangeable object: UnchangeableObject object</li>", 1, html=True)
  2098. def test_custom_function_mail_action(self):
  2099. "Tests a custom action defined in a function"
  2100. action_data = {
  2101. ACTION_CHECKBOX_NAME: [1],
  2102. 'action': 'external_mail',
  2103. 'index': 0,
  2104. }
  2105. self.client.post('/test_admin/admin/admin_views/externalsubscriber/', action_data)
  2106. self.assertEqual(len(mail.outbox), 1)
  2107. self.assertEqual(mail.outbox[0].subject, 'Greetings from a function action')
  2108. def test_custom_function_action_with_redirect(self):
  2109. "Tests a custom action defined in a function"
  2110. action_data = {
  2111. ACTION_CHECKBOX_NAME: [1],
  2112. 'action': 'redirect_to',
  2113. 'index': 0,
  2114. }
  2115. response = self.client.post('/test_admin/admin/admin_views/externalsubscriber/', action_data)
  2116. self.assertEqual(response.status_code, 302)
  2117. def test_default_redirect(self):
  2118. """
  2119. Test that actions which don't return an HttpResponse are redirected to
  2120. the same page, retaining the querystring (which may contain changelist
  2121. information).
  2122. """
  2123. action_data = {
  2124. ACTION_CHECKBOX_NAME: [1],
  2125. 'action': 'external_mail',
  2126. 'index': 0,
  2127. }
  2128. url = '/test_admin/admin/admin_views/externalsubscriber/?o=1'
  2129. response = self.client.post(url, action_data)
  2130. self.assertRedirects(response, url)
  2131. def test_custom_function_action_streaming_response(self):
  2132. """Tests a custom action that returns a StreamingHttpResponse."""
  2133. action_data = {
  2134. ACTION_CHECKBOX_NAME: [1],
  2135. 'action': 'download',
  2136. 'index': 0,
  2137. }
  2138. response = self.client.post('/test_admin/admin/admin_views/externalsubscriber/', action_data)
  2139. content = b''.join(response.streaming_content)
  2140. self.assertEqual(content, b'This is the content of the file')
  2141. self.assertEqual(response.status_code, 200)
  2142. def test_custom_function_action_no_perm_response(self):
  2143. """Tests a custom action that returns an HttpResponse with 403 code."""
  2144. action_data = {
  2145. ACTION_CHECKBOX_NAME: [1],
  2146. 'action': 'no_perm',
  2147. 'index': 0,
  2148. }
  2149. response = self.client.post('/test_admin/admin/admin_views/externalsubscriber/', action_data)
  2150. self.assertEqual(response.status_code, 403)
  2151. self.assertEqual(response.content, b'No permission to perform this action')
  2152. def test_actions_ordering(self):
  2153. """
  2154. Ensure that actions are ordered as expected.
  2155. Refs #15964.
  2156. """
  2157. response = self.client.get('/test_admin/admin/admin_views/externalsubscriber/')
  2158. self.assertContains(response, '''<label>Action: <select name="action">
  2159. <option value="" selected="selected">---------</option>
  2160. <option value="delete_selected">Delete selected external
  2161. subscribers</option>
  2162. <option value="redirect_to">Redirect to (Awesome action)</option>
  2163. <option value="external_mail">External mail (Another awesome
  2164. action)</option>
  2165. <option value="download">Download subscription</option>
  2166. <option value="no_perm">No permission to run</option>
  2167. </select>''', html=True)
  2168. def test_model_without_action(self):
  2169. "Tests a ModelAdmin without any action"
  2170. response = self.client.get('/test_admin/admin/admin_views/oldsubscriber/')
  2171. self.assertEqual(response.context["action_form"], None)
  2172. self.assertNotContains(response, '<input type="checkbox" class="action-select"',
  2173. msg_prefix="Found an unexpected action toggle checkboxbox in response")
  2174. self.assertNotContains(response, '<input type="checkbox" class="action-select"')
  2175. def test_model_without_action_still_has_jquery(self):
  2176. "Tests that a ModelAdmin without any actions still gets jQuery included in page"
  2177. response = self.client.get('/test_admin/admin/admin_views/oldsubscriber/')
  2178. self.assertEqual(response.context["action_form"], None)
  2179. self.assertContains(response, 'jquery.min.js',
  2180. msg_prefix="jQuery missing from admin pages for model with no admin actions")
  2181. def test_action_column_class(self):
  2182. "Tests that the checkbox column class is present in the response"
  2183. response = self.client.get('/test_admin/admin/admin_views/subscriber/')
  2184. self.assertNotEqual(response.context["action_form"], None)
  2185. self.assertContains(response, 'action-checkbox-column')
  2186. def test_multiple_actions_form(self):
  2187. """
  2188. Test that actions come from the form whose submit button was pressed (#10618).
  2189. """
  2190. action_data = {
  2191. ACTION_CHECKBOX_NAME: [1],
  2192. # Two different actions selected on the two forms...
  2193. 'action': ['external_mail', 'delete_selected'],
  2194. # ...but we clicked "go" on the top form.
  2195. 'index': 0
  2196. }
  2197. self.client.post('/test_admin/admin/admin_views/externalsubscriber/', action_data)
  2198. # Send mail, don't delete.
  2199. self.assertEqual(len(mail.outbox), 1)
  2200. self.assertEqual(mail.outbox[0].subject, 'Greetings from a function action')
  2201. def test_user_message_on_none_selected(self):
  2202. """
  2203. User should see a warning when 'Go' is pressed and no items are selected.
  2204. """
  2205. action_data = {
  2206. ACTION_CHECKBOX_NAME: [],
  2207. 'action': 'delete_selected',
  2208. 'index': 0,
  2209. }
  2210. response = self.client.post('/test_admin/admin/admin_views/subscriber/', action_data)
  2211. msg = """Items must be selected in order to perform actions on them. No items have been changed."""
  2212. self.assertContains(response, msg)
  2213. self.assertEqual(Subscriber.objects.count(), 2)
  2214. def test_user_message_on_no_action(self):
  2215. """
  2216. User should see a warning when 'Go' is pressed and no action is selected.
  2217. """
  2218. action_data = {
  2219. ACTION_CHECKBOX_NAME: [1, 2],
  2220. 'action': '',
  2221. 'index': 0,
  2222. }
  2223. response = self.client.post('/test_admin/admin/admin_views/subscriber/', action_data)
  2224. msg = """No action selected."""
  2225. self.assertContains(response, msg)
  2226. self.assertEqual(Subscriber.objects.count(), 2)
  2227. def test_selection_counter(self):
  2228. """
  2229. Check if the selection counter is there.
  2230. """
  2231. response = self.client.get('/test_admin/admin/admin_views/subscriber/')
  2232. self.assertContains(response, '0 of 2 selected')
  2233. def test_popup_actions(self):
  2234. """ Actions should not be shown in popups. """
  2235. response = self.client.get('/test_admin/admin/admin_views/subscriber/')
  2236. self.assertNotEqual(response.context["action_form"], None)
  2237. response = self.client.get(
  2238. '/test_admin/admin/admin_views/subscriber/?%s' % IS_POPUP_VAR)
  2239. self.assertEqual(response.context["action_form"], None)
  2240. def test_popup_template_response(self):
  2241. """
  2242. Success on popups shall be rendered from template in order to allow
  2243. easy customization.
  2244. """
  2245. response = self.client.post(
  2246. '/test_admin/admin/admin_views/actor/add/?%s=1' % IS_POPUP_VAR,
  2247. {'name': 'Troy McClure', 'age': '55', IS_POPUP_VAR: '1'})
  2248. self.assertEqual(response.status_code, 200)
  2249. self.assertEqual(response.template_name, 'admin/popup_response.html')
  2250. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2251. class TestCustomChangeList(TestCase):
  2252. urls = "admin_views.urls"
  2253. fixtures = ['admin-views-users.xml']
  2254. urlbit = 'admin'
  2255. def setUp(self):
  2256. result = self.client.login(username='super', password='secret')
  2257. self.assertEqual(result, True)
  2258. def tearDown(self):
  2259. self.client.logout()
  2260. def test_custom_changelist(self):
  2261. """
  2262. Validate that a custom ChangeList class can be used (#9749)
  2263. """
  2264. # Insert some data
  2265. post_data = {"name": "First Gadget"}
  2266. response = self.client.post('/test_admin/%s/admin_views/gadget/add/' % self.urlbit, post_data)
  2267. self.assertEqual(response.status_code, 302) # redirect somewhere
  2268. # Hit the page once to get messages out of the queue message list
  2269. response = self.client.get('/test_admin/%s/admin_views/gadget/' % self.urlbit)
  2270. # Ensure that data is still not visible on the page
  2271. response = self.client.get('/test_admin/%s/admin_views/gadget/' % self.urlbit)
  2272. self.assertEqual(response.status_code, 200)
  2273. self.assertNotContains(response, 'First Gadget')
  2274. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2275. class TestInlineNotEditable(TestCase):
  2276. urls = "admin_views.urls"
  2277. fixtures = ['admin-views-users.xml']
  2278. def setUp(self):
  2279. result = self.client.login(username='super', password='secret')
  2280. self.assertEqual(result, True)
  2281. def tearDown(self):
  2282. self.client.logout()
  2283. def test(self):
  2284. """
  2285. InlineModelAdmin broken?
  2286. """
  2287. response = self.client.get('/test_admin/admin/admin_views/parent/add/')
  2288. self.assertEqual(response.status_code, 200)
  2289. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2290. class AdminCustomQuerysetTest(TestCase):
  2291. urls = "admin_views.urls"
  2292. fixtures = ['admin-views-users.xml']
  2293. def setUp(self):
  2294. self.client.login(username='super', password='secret')
  2295. self.pks = [EmptyModel.objects.create().id for i in range(3)]
  2296. self.super_login = {
  2297. REDIRECT_FIELD_NAME: '/test_admin/admin/',
  2298. 'username': 'super',
  2299. 'password': 'secret',
  2300. }
  2301. def test_changelist_view(self):
  2302. response = self.client.get('/test_admin/admin/admin_views/emptymodel/')
  2303. for i in self.pks:
  2304. if i > 1:
  2305. self.assertContains(response, 'Primary key = %s' % i)
  2306. else:
  2307. self.assertNotContains(response, 'Primary key = %s' % i)
  2308. def test_changelist_view_count_queries(self):
  2309. # create 2 Person objects
  2310. Person.objects.create(name='person1', gender=1)
  2311. Person.objects.create(name='person2', gender=2)
  2312. # 4 queries are expected: 1 for the session, 1 for the user,
  2313. # 1 for the count and 1 for the objects on the page
  2314. with self.assertNumQueries(4):
  2315. resp = self.client.get('/test_admin/admin/admin_views/person/')
  2316. self.assertEqual(resp.context['selection_note'], '0 of 2 selected')
  2317. self.assertEqual(resp.context['selection_note_all'], 'All 2 selected')
  2318. # here one more count(*) query will run, because filters were applied
  2319. with self.assertNumQueries(5):
  2320. extra = {'q': 'not_in_name'}
  2321. resp = self.client.get('/test_admin/admin/admin_views/person/', extra)
  2322. self.assertEqual(resp.context['selection_note'], '0 of 0 selected')
  2323. self.assertEqual(resp.context['selection_note_all'], 'All 0 selected')
  2324. with self.assertNumQueries(5):
  2325. extra = {'q': 'person'}
  2326. resp = self.client.get('/test_admin/admin/admin_views/person/', extra)
  2327. self.assertEqual(resp.context['selection_note'], '0 of 2 selected')
  2328. self.assertEqual(resp.context['selection_note_all'], 'All 2 selected')
  2329. with self.assertNumQueries(5):
  2330. extra = {'gender__exact': '1'}
  2331. resp = self.client.get('/test_admin/admin/admin_views/person/', extra)
  2332. self.assertEqual(resp.context['selection_note'], '0 of 1 selected')
  2333. self.assertEqual(resp.context['selection_note_all'], '1 selected')
  2334. def test_change_view(self):
  2335. for i in self.pks:
  2336. response = self.client.get('/test_admin/admin/admin_views/emptymodel/%s/' % i)
  2337. if i > 1:
  2338. self.assertEqual(response.status_code, 200)
  2339. else:
  2340. self.assertEqual(response.status_code, 404)
  2341. def test_add_model_modeladmin_defer_qs(self):
  2342. # Test for #14529. defer() is used in ModelAdmin.get_queryset()
  2343. # model has __unicode__ method
  2344. self.assertEqual(CoverLetter.objects.count(), 0)
  2345. # Emulate model instance creation via the admin
  2346. post_data = {
  2347. "author": "Candidate, Best",
  2348. "_save": "Save",
  2349. }
  2350. response = self.client.post('/test_admin/admin/admin_views/coverletter/add/',
  2351. post_data, follow=True)
  2352. self.assertEqual(response.status_code, 200)
  2353. self.assertEqual(CoverLetter.objects.count(), 1)
  2354. # Message should contain non-ugly model verbose name
  2355. self.assertContains(
  2356. response,
  2357. '<li class="success">The cover letter &quot;Candidate, Best&quot; was added successfully.</li>',
  2358. html=True
  2359. )
  2360. # model has no __unicode__ method
  2361. self.assertEqual(ShortMessage.objects.count(), 0)
  2362. # Emulate model instance creation via the admin
  2363. post_data = {
  2364. "content": "What's this SMS thing?",
  2365. "_save": "Save",
  2366. }
  2367. response = self.client.post('/test_admin/admin/admin_views/shortmessage/add/',
  2368. post_data, follow=True)
  2369. self.assertEqual(response.status_code, 200)
  2370. self.assertEqual(ShortMessage.objects.count(), 1)
  2371. # Message should contain non-ugly model verbose name
  2372. self.assertContains(
  2373. response,
  2374. '<li class="success">The short message &quot;ShortMessage object&quot; was added successfully.</li>',
  2375. html=True
  2376. )
  2377. def test_add_model_modeladmin_only_qs(self):
  2378. # Test for #14529. only() is used in ModelAdmin.get_queryset()
  2379. # model has __unicode__ method
  2380. self.assertEqual(Telegram.objects.count(), 0)
  2381. # Emulate model instance creation via the admin
  2382. post_data = {
  2383. "title": "Urgent telegram",
  2384. "_save": "Save",
  2385. }
  2386. response = self.client.post('/test_admin/admin/admin_views/telegram/add/',
  2387. post_data, follow=True)
  2388. self.assertEqual(response.status_code, 200)
  2389. self.assertEqual(Telegram.objects.count(), 1)
  2390. # Message should contain non-ugly model verbose name
  2391. self.assertContains(
  2392. response,
  2393. '<li class="success">The telegram &quot;Urgent telegram&quot; was added successfully.</li>',
  2394. html=True
  2395. )
  2396. # model has no __unicode__ method
  2397. self.assertEqual(Paper.objects.count(), 0)
  2398. # Emulate model instance creation via the admin
  2399. post_data = {
  2400. "title": "My Modified Paper Title",
  2401. "_save": "Save",
  2402. }
  2403. response = self.client.post('/test_admin/admin/admin_views/paper/add/',
  2404. post_data, follow=True)
  2405. self.assertEqual(response.status_code, 200)
  2406. self.assertEqual(Paper.objects.count(), 1)
  2407. # Message should contain non-ugly model verbose name
  2408. self.assertContains(
  2409. response,
  2410. '<li class="success">The paper &quot;Paper object&quot; was added successfully.</li>',
  2411. html=True
  2412. )
  2413. def test_edit_model_modeladmin_defer_qs(self):
  2414. # Test for #14529. defer() is used in ModelAdmin.get_queryset()
  2415. # model has __unicode__ method
  2416. cl = CoverLetter.objects.create(author="John Doe")
  2417. self.assertEqual(CoverLetter.objects.count(), 1)
  2418. response = self.client.get('/test_admin/admin/admin_views/coverletter/%s/' % cl.pk)
  2419. self.assertEqual(response.status_code, 200)
  2420. # Emulate model instance edit via the admin
  2421. post_data = {
  2422. "author": "John Doe II",
  2423. "_save": "Save",
  2424. }
  2425. response = self.client.post('/test_admin/admin/admin_views/coverletter/%s/' % cl.pk,
  2426. post_data, follow=True)
  2427. self.assertEqual(response.status_code, 200)
  2428. self.assertEqual(CoverLetter.objects.count(), 1)
  2429. # Message should contain non-ugly model verbose name. Instance
  2430. # representation is set by model's __unicode__()
  2431. self.assertContains(
  2432. response,
  2433. '<li class="success">The cover letter &quot;John Doe II&quot; was changed successfully.</li>',
  2434. html=True
  2435. )
  2436. # model has no __unicode__ method
  2437. sm = ShortMessage.objects.create(content="This is expensive")
  2438. self.assertEqual(ShortMessage.objects.count(), 1)
  2439. response = self.client.get('/test_admin/admin/admin_views/shortmessage/%s/' % sm.pk)
  2440. self.assertEqual(response.status_code, 200)
  2441. # Emulate model instance edit via the admin
  2442. post_data = {
  2443. "content": "Too expensive",
  2444. "_save": "Save",
  2445. }
  2446. response = self.client.post('/test_admin/admin/admin_views/shortmessage/%s/' % sm.pk,
  2447. post_data, follow=True)
  2448. self.assertEqual(response.status_code, 200)
  2449. self.assertEqual(ShortMessage.objects.count(), 1)
  2450. # Message should contain non-ugly model verbose name. The ugly(!)
  2451. # instance representation is set by six.text_type()
  2452. self.assertContains(
  2453. response,
  2454. '<li class="success">The short message &quot;ShortMessage_Deferred_timestamp object&quot; was changed successfully.</li>',
  2455. html=True
  2456. )
  2457. def test_edit_model_modeladmin_only_qs(self):
  2458. # Test for #14529. only() is used in ModelAdmin.get_queryset()
  2459. # model has __unicode__ method
  2460. t = Telegram.objects.create(title="Frist Telegram")
  2461. self.assertEqual(Telegram.objects.count(), 1)
  2462. response = self.client.get('/test_admin/admin/admin_views/telegram/%s/' % t.pk)
  2463. self.assertEqual(response.status_code, 200)
  2464. # Emulate model instance edit via the admin
  2465. post_data = {
  2466. "title": "Telegram without typo",
  2467. "_save": "Save",
  2468. }
  2469. response = self.client.post('/test_admin/admin/admin_views/telegram/%s/' % t.pk,
  2470. post_data, follow=True)
  2471. self.assertEqual(response.status_code, 200)
  2472. self.assertEqual(Telegram.objects.count(), 1)
  2473. # Message should contain non-ugly model verbose name. The instance
  2474. # representation is set by model's __unicode__()
  2475. self.assertContains(
  2476. response,
  2477. '<li class="success">The telegram &quot;Telegram without typo&quot; was changed successfully.</li>',
  2478. html=True
  2479. )
  2480. # model has no __unicode__ method
  2481. p = Paper.objects.create(title="My Paper Title")
  2482. self.assertEqual(Paper.objects.count(), 1)
  2483. response = self.client.get('/test_admin/admin/admin_views/paper/%s/' % p.pk)
  2484. self.assertEqual(response.status_code, 200)
  2485. # Emulate model instance edit via the admin
  2486. post_data = {
  2487. "title": "My Modified Paper Title",
  2488. "_save": "Save",
  2489. }
  2490. response = self.client.post('/test_admin/admin/admin_views/paper/%s/' % p.pk,
  2491. post_data, follow=True)
  2492. self.assertEqual(response.status_code, 200)
  2493. self.assertEqual(Paper.objects.count(), 1)
  2494. # Message should contain non-ugly model verbose name. The ugly(!)
  2495. # instance representation is set by six.text_type()
  2496. self.assertContains(
  2497. response,
  2498. '<li class="success">The paper &quot;Paper_Deferred_author object&quot; was changed successfully.</li>',
  2499. html=True
  2500. )
  2501. def test_history_view_custom_qs(self):
  2502. """
  2503. Ensure that custom querysets are considered for the admin history view.
  2504. Refs #21013.
  2505. """
  2506. self.client.post(reverse('admin:login'), self.super_login)
  2507. FilteredManager.objects.create(pk=1)
  2508. FilteredManager.objects.create(pk=2)
  2509. response = self.client.get('/test_admin/admin/admin_views/filteredmanager/')
  2510. self.assertContains(response, "PK=1")
  2511. self.assertContains(response, "PK=2")
  2512. self.assertEqual(self.client.get('/test_admin/admin/admin_views/filteredmanager/1/history/').status_code, 200)
  2513. self.assertEqual(self.client.get('/test_admin/admin/admin_views/filteredmanager/2/history/').status_code, 200)
  2514. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2515. class AdminInlineFileUploadTest(TestCase):
  2516. urls = "admin_views.urls"
  2517. fixtures = ['admin-views-users.xml', 'admin-views-actions.xml']
  2518. urlbit = 'admin'
  2519. def setUp(self):
  2520. self.client.login(username='super', password='secret')
  2521. # Set up test Picture and Gallery.
  2522. # These must be set up here instead of in fixtures in order to allow Picture
  2523. # to use a NamedTemporaryFile.
  2524. tdir = tempfile.gettempdir()
  2525. file1 = tempfile.NamedTemporaryFile(suffix=".file1", dir=tdir)
  2526. file1.write(b'a' * (2 ** 21))
  2527. filename = file1.name
  2528. file1.close()
  2529. self.gallery = Gallery(name="Test Gallery")
  2530. self.gallery.save()
  2531. self.picture = Picture(name="Test Picture", image=filename, gallery=self.gallery)
  2532. self.picture.save()
  2533. def tearDown(self):
  2534. self.client.logout()
  2535. def test_inline_file_upload_edit_validation_error_post(self):
  2536. """
  2537. Test that inline file uploads correctly display prior data (#10002).
  2538. """
  2539. post_data = {
  2540. "name": "Test Gallery",
  2541. "pictures-TOTAL_FORMS": "2",
  2542. "pictures-INITIAL_FORMS": "1",
  2543. "pictures-MAX_NUM_FORMS": "0",
  2544. "pictures-0-id": six.text_type(self.picture.id),
  2545. "pictures-0-gallery": six.text_type(self.gallery.id),
  2546. "pictures-0-name": "Test Picture",
  2547. "pictures-0-image": "",
  2548. "pictures-1-id": "",
  2549. "pictures-1-gallery": str(self.gallery.id),
  2550. "pictures-1-name": "Test Picture 2",
  2551. "pictures-1-image": "",
  2552. }
  2553. response = self.client.post('/test_admin/%s/admin_views/gallery/%d/' % (self.urlbit, self.gallery.id), post_data)
  2554. self.assertContains(response, b"Currently")
  2555. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2556. class AdminInlineTests(TestCase):
  2557. urls = "admin_views.urls"
  2558. fixtures = ['admin-views-users.xml']
  2559. def setUp(self):
  2560. self.post_data = {
  2561. "name": "Test Name",
  2562. "widget_set-TOTAL_FORMS": "3",
  2563. "widget_set-INITIAL_FORMS": "0",
  2564. "widget_set-MAX_NUM_FORMS": "0",
  2565. "widget_set-0-id": "",
  2566. "widget_set-0-owner": "1",
  2567. "widget_set-0-name": "",
  2568. "widget_set-1-id": "",
  2569. "widget_set-1-owner": "1",
  2570. "widget_set-1-name": "",
  2571. "widget_set-2-id": "",
  2572. "widget_set-2-owner": "1",
  2573. "widget_set-2-name": "",
  2574. "doohickey_set-TOTAL_FORMS": "3",
  2575. "doohickey_set-INITIAL_FORMS": "0",
  2576. "doohickey_set-MAX_NUM_FORMS": "0",
  2577. "doohickey_set-0-owner": "1",
  2578. "doohickey_set-0-code": "",
  2579. "doohickey_set-0-name": "",
  2580. "doohickey_set-1-owner": "1",
  2581. "doohickey_set-1-code": "",
  2582. "doohickey_set-1-name": "",
  2583. "doohickey_set-2-owner": "1",
  2584. "doohickey_set-2-code": "",
  2585. "doohickey_set-2-name": "",
  2586. "grommet_set-TOTAL_FORMS": "3",
  2587. "grommet_set-INITIAL_FORMS": "0",
  2588. "grommet_set-MAX_NUM_FORMS": "0",
  2589. "grommet_set-0-code": "",
  2590. "grommet_set-0-owner": "1",
  2591. "grommet_set-0-name": "",
  2592. "grommet_set-1-code": "",
  2593. "grommet_set-1-owner": "1",
  2594. "grommet_set-1-name": "",
  2595. "grommet_set-2-code": "",
  2596. "grommet_set-2-owner": "1",
  2597. "grommet_set-2-name": "",
  2598. "whatsit_set-TOTAL_FORMS": "3",
  2599. "whatsit_set-INITIAL_FORMS": "0",
  2600. "whatsit_set-MAX_NUM_FORMS": "0",
  2601. "whatsit_set-0-owner": "1",
  2602. "whatsit_set-0-index": "",
  2603. "whatsit_set-0-name": "",
  2604. "whatsit_set-1-owner": "1",
  2605. "whatsit_set-1-index": "",
  2606. "whatsit_set-1-name": "",
  2607. "whatsit_set-2-owner": "1",
  2608. "whatsit_set-2-index": "",
  2609. "whatsit_set-2-name": "",
  2610. "fancydoodad_set-TOTAL_FORMS": "3",
  2611. "fancydoodad_set-INITIAL_FORMS": "0",
  2612. "fancydoodad_set-MAX_NUM_FORMS": "0",
  2613. "fancydoodad_set-0-doodad_ptr": "",
  2614. "fancydoodad_set-0-owner": "1",
  2615. "fancydoodad_set-0-name": "",
  2616. "fancydoodad_set-0-expensive": "on",
  2617. "fancydoodad_set-1-doodad_ptr": "",
  2618. "fancydoodad_set-1-owner": "1",
  2619. "fancydoodad_set-1-name": "",
  2620. "fancydoodad_set-1-expensive": "on",
  2621. "fancydoodad_set-2-doodad_ptr": "",
  2622. "fancydoodad_set-2-owner": "1",
  2623. "fancydoodad_set-2-name": "",
  2624. "fancydoodad_set-2-expensive": "on",
  2625. "category_set-TOTAL_FORMS": "3",
  2626. "category_set-INITIAL_FORMS": "0",
  2627. "category_set-MAX_NUM_FORMS": "0",
  2628. "category_set-0-order": "",
  2629. "category_set-0-id": "",
  2630. "category_set-0-collector": "1",
  2631. "category_set-1-order": "",
  2632. "category_set-1-id": "",
  2633. "category_set-1-collector": "1",
  2634. "category_set-2-order": "",
  2635. "category_set-2-id": "",
  2636. "category_set-2-collector": "1",
  2637. }
  2638. result = self.client.login(username='super', password='secret')
  2639. self.assertEqual(result, True)
  2640. self.collector = Collector(pk=1, name='John Fowles')
  2641. self.collector.save()
  2642. def tearDown(self):
  2643. self.client.logout()
  2644. def test_simple_inline(self):
  2645. "A simple model can be saved as inlines"
  2646. # First add a new inline
  2647. self.post_data['widget_set-0-name'] = "Widget 1"
  2648. collector_url = '/test_admin/admin/admin_views/collector/%d/' % self.collector.pk
  2649. response = self.client.post(collector_url, self.post_data)
  2650. self.assertEqual(response.status_code, 302)
  2651. self.assertEqual(Widget.objects.count(), 1)
  2652. self.assertEqual(Widget.objects.all()[0].name, "Widget 1")
  2653. widget_id = Widget.objects.all()[0].id
  2654. # Check that the PK link exists on the rendered form
  2655. response = self.client.get(collector_url)
  2656. self.assertContains(response, 'name="widget_set-0-id"')
  2657. # Now resave that inline
  2658. self.post_data['widget_set-INITIAL_FORMS'] = "1"
  2659. self.post_data['widget_set-0-id'] = str(widget_id)
  2660. self.post_data['widget_set-0-name'] = "Widget 1"
  2661. response = self.client.post(collector_url, self.post_data)
  2662. self.assertEqual(response.status_code, 302)
  2663. self.assertEqual(Widget.objects.count(), 1)
  2664. self.assertEqual(Widget.objects.all()[0].name, "Widget 1")
  2665. # Now modify that inline
  2666. self.post_data['widget_set-INITIAL_FORMS'] = "1"
  2667. self.post_data['widget_set-0-id'] = str(widget_id)
  2668. self.post_data['widget_set-0-name'] = "Widget 1 Updated"
  2669. response = self.client.post(collector_url, self.post_data)
  2670. self.assertEqual(response.status_code, 302)
  2671. self.assertEqual(Widget.objects.count(), 1)
  2672. self.assertEqual(Widget.objects.all()[0].name, "Widget 1 Updated")
  2673. def test_explicit_autofield_inline(self):
  2674. "A model with an explicit autofield primary key can be saved as inlines. Regression for #8093"
  2675. # First add a new inline
  2676. self.post_data['grommet_set-0-name'] = "Grommet 1"
  2677. collector_url = '/test_admin/admin/admin_views/collector/%d/' % self.collector.pk
  2678. response = self.client.post(collector_url, self.post_data)
  2679. self.assertEqual(response.status_code, 302)
  2680. self.assertEqual(Grommet.objects.count(), 1)
  2681. self.assertEqual(Grommet.objects.all()[0].name, "Grommet 1")
  2682. # Check that the PK link exists on the rendered form
  2683. response = self.client.get(collector_url)
  2684. self.assertContains(response, 'name="grommet_set-0-code"')
  2685. # Now resave that inline
  2686. self.post_data['grommet_set-INITIAL_FORMS'] = "1"
  2687. self.post_data['grommet_set-0-code'] = str(Grommet.objects.all()[0].code)
  2688. self.post_data['grommet_set-0-name'] = "Grommet 1"
  2689. response = self.client.post(collector_url, self.post_data)
  2690. self.assertEqual(response.status_code, 302)
  2691. self.assertEqual(Grommet.objects.count(), 1)
  2692. self.assertEqual(Grommet.objects.all()[0].name, "Grommet 1")
  2693. # Now modify that inline
  2694. self.post_data['grommet_set-INITIAL_FORMS'] = "1"
  2695. self.post_data['grommet_set-0-code'] = str(Grommet.objects.all()[0].code)
  2696. self.post_data['grommet_set-0-name'] = "Grommet 1 Updated"
  2697. response = self.client.post(collector_url, self.post_data)
  2698. self.assertEqual(response.status_code, 302)
  2699. self.assertEqual(Grommet.objects.count(), 1)
  2700. self.assertEqual(Grommet.objects.all()[0].name, "Grommet 1 Updated")
  2701. def test_char_pk_inline(self):
  2702. "A model with a character PK can be saved as inlines. Regression for #10992"
  2703. # First add a new inline
  2704. self.post_data['doohickey_set-0-code'] = "DH1"
  2705. self.post_data['doohickey_set-0-name'] = "Doohickey 1"
  2706. collector_url = '/test_admin/admin/admin_views/collector/%d/' % self.collector.pk
  2707. response = self.client.post(collector_url, self.post_data)
  2708. self.assertEqual(response.status_code, 302)
  2709. self.assertEqual(DooHickey.objects.count(), 1)
  2710. self.assertEqual(DooHickey.objects.all()[0].name, "Doohickey 1")
  2711. # Check that the PK link exists on the rendered form
  2712. response = self.client.get(collector_url)
  2713. self.assertContains(response, 'name="doohickey_set-0-code"')
  2714. # Now resave that inline
  2715. self.post_data['doohickey_set-INITIAL_FORMS'] = "1"
  2716. self.post_data['doohickey_set-0-code'] = "DH1"
  2717. self.post_data['doohickey_set-0-name'] = "Doohickey 1"
  2718. response = self.client.post(collector_url, self.post_data)
  2719. self.assertEqual(response.status_code, 302)
  2720. self.assertEqual(DooHickey.objects.count(), 1)
  2721. self.assertEqual(DooHickey.objects.all()[0].name, "Doohickey 1")
  2722. # Now modify that inline
  2723. self.post_data['doohickey_set-INITIAL_FORMS'] = "1"
  2724. self.post_data['doohickey_set-0-code'] = "DH1"
  2725. self.post_data['doohickey_set-0-name'] = "Doohickey 1 Updated"
  2726. response = self.client.post(collector_url, self.post_data)
  2727. self.assertEqual(response.status_code, 302)
  2728. self.assertEqual(DooHickey.objects.count(), 1)
  2729. self.assertEqual(DooHickey.objects.all()[0].name, "Doohickey 1 Updated")
  2730. def test_integer_pk_inline(self):
  2731. "A model with an integer PK can be saved as inlines. Regression for #10992"
  2732. # First add a new inline
  2733. self.post_data['whatsit_set-0-index'] = "42"
  2734. self.post_data['whatsit_set-0-name'] = "Whatsit 1"
  2735. response = self.client.post('/test_admin/admin/admin_views/collector/1/', self.post_data)
  2736. self.assertEqual(response.status_code, 302)
  2737. self.assertEqual(Whatsit.objects.count(), 1)
  2738. self.assertEqual(Whatsit.objects.all()[0].name, "Whatsit 1")
  2739. # Check that the PK link exists on the rendered form
  2740. response = self.client.get('/test_admin/admin/admin_views/collector/1/')
  2741. self.assertContains(response, 'name="whatsit_set-0-index"')
  2742. # Now resave that inline
  2743. self.post_data['whatsit_set-INITIAL_FORMS'] = "1"
  2744. self.post_data['whatsit_set-0-index'] = "42"
  2745. self.post_data['whatsit_set-0-name'] = "Whatsit 1"
  2746. response = self.client.post('/test_admin/admin/admin_views/collector/1/', self.post_data)
  2747. self.assertEqual(response.status_code, 302)
  2748. self.assertEqual(Whatsit.objects.count(), 1)
  2749. self.assertEqual(Whatsit.objects.all()[0].name, "Whatsit 1")
  2750. # Now modify that inline
  2751. self.post_data['whatsit_set-INITIAL_FORMS'] = "1"
  2752. self.post_data['whatsit_set-0-index'] = "42"
  2753. self.post_data['whatsit_set-0-name'] = "Whatsit 1 Updated"
  2754. response = self.client.post('/test_admin/admin/admin_views/collector/1/', self.post_data)
  2755. self.assertEqual(response.status_code, 302)
  2756. self.assertEqual(Whatsit.objects.count(), 1)
  2757. self.assertEqual(Whatsit.objects.all()[0].name, "Whatsit 1 Updated")
  2758. def test_inherited_inline(self):
  2759. "An inherited model can be saved as inlines. Regression for #11042"
  2760. # First add a new inline
  2761. self.post_data['fancydoodad_set-0-name'] = "Fancy Doodad 1"
  2762. collector_url = '/test_admin/admin/admin_views/collector/%d/' % self.collector.pk
  2763. response = self.client.post(collector_url, self.post_data)
  2764. self.assertEqual(response.status_code, 302)
  2765. self.assertEqual(FancyDoodad.objects.count(), 1)
  2766. self.assertEqual(FancyDoodad.objects.all()[0].name, "Fancy Doodad 1")
  2767. doodad_pk = FancyDoodad.objects.all()[0].pk
  2768. # Check that the PK link exists on the rendered form
  2769. response = self.client.get(collector_url)
  2770. self.assertContains(response, 'name="fancydoodad_set-0-doodad_ptr"')
  2771. # Now resave that inline
  2772. self.post_data['fancydoodad_set-INITIAL_FORMS'] = "1"
  2773. self.post_data['fancydoodad_set-0-doodad_ptr'] = str(doodad_pk)
  2774. self.post_data['fancydoodad_set-0-name'] = "Fancy Doodad 1"
  2775. response = self.client.post(collector_url, self.post_data)
  2776. self.assertEqual(response.status_code, 302)
  2777. self.assertEqual(FancyDoodad.objects.count(), 1)
  2778. self.assertEqual(FancyDoodad.objects.all()[0].name, "Fancy Doodad 1")
  2779. # Now modify that inline
  2780. self.post_data['fancydoodad_set-INITIAL_FORMS'] = "1"
  2781. self.post_data['fancydoodad_set-0-doodad_ptr'] = str(doodad_pk)
  2782. self.post_data['fancydoodad_set-0-name'] = "Fancy Doodad 1 Updated"
  2783. response = self.client.post(collector_url, self.post_data)
  2784. self.assertEqual(response.status_code, 302)
  2785. self.assertEqual(FancyDoodad.objects.count(), 1)
  2786. self.assertEqual(FancyDoodad.objects.all()[0].name, "Fancy Doodad 1 Updated")
  2787. def test_ordered_inline(self):
  2788. """Check that an inline with an editable ordering fields is
  2789. updated correctly. Regression for #10922"""
  2790. # Create some objects with an initial ordering
  2791. Category.objects.create(id=1, order=1, collector=self.collector)
  2792. Category.objects.create(id=2, order=2, collector=self.collector)
  2793. Category.objects.create(id=3, order=0, collector=self.collector)
  2794. Category.objects.create(id=4, order=0, collector=self.collector)
  2795. # NB: The order values must be changed so that the items are reordered.
  2796. self.post_data.update({
  2797. "name": "Frederick Clegg",
  2798. "category_set-TOTAL_FORMS": "7",
  2799. "category_set-INITIAL_FORMS": "4",
  2800. "category_set-MAX_NUM_FORMS": "0",
  2801. "category_set-0-order": "14",
  2802. "category_set-0-id": "1",
  2803. "category_set-0-collector": "1",
  2804. "category_set-1-order": "13",
  2805. "category_set-1-id": "2",
  2806. "category_set-1-collector": "1",
  2807. "category_set-2-order": "1",
  2808. "category_set-2-id": "3",
  2809. "category_set-2-collector": "1",
  2810. "category_set-3-order": "0",
  2811. "category_set-3-id": "4",
  2812. "category_set-3-collector": "1",
  2813. "category_set-4-order": "",
  2814. "category_set-4-id": "",
  2815. "category_set-4-collector": "1",
  2816. "category_set-5-order": "",
  2817. "category_set-5-id": "",
  2818. "category_set-5-collector": "1",
  2819. "category_set-6-order": "",
  2820. "category_set-6-id": "",
  2821. "category_set-6-collector": "1",
  2822. })
  2823. response = self.client.post('/test_admin/admin/admin_views/collector/1/', self.post_data)
  2824. # Successful post will redirect
  2825. self.assertEqual(response.status_code, 302)
  2826. # Check that the order values have been applied to the right objects
  2827. self.assertEqual(self.collector.category_set.count(), 4)
  2828. self.assertEqual(Category.objects.get(id=1).order, 14)
  2829. self.assertEqual(Category.objects.get(id=2).order, 13)
  2830. self.assertEqual(Category.objects.get(id=3).order, 1)
  2831. self.assertEqual(Category.objects.get(id=4).order, 0)
  2832. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2833. class NeverCacheTests(TestCase):
  2834. urls = "admin_views.urls"
  2835. fixtures = ['admin-views-users.xml', 'admin-views-colors.xml', 'admin-views-fabrics.xml']
  2836. def setUp(self):
  2837. self.client.login(username='super', password='secret')
  2838. def tearDown(self):
  2839. self.client.logout()
  2840. def testAdminIndex(self):
  2841. "Check the never-cache status of the main index"
  2842. response = self.client.get('/test_admin/admin/')
  2843. self.assertEqual(get_max_age(response), 0)
  2844. def testAppIndex(self):
  2845. "Check the never-cache status of an application index"
  2846. response = self.client.get('/test_admin/admin/admin_views/')
  2847. self.assertEqual(get_max_age(response), 0)
  2848. def testModelIndex(self):
  2849. "Check the never-cache status of a model index"
  2850. response = self.client.get('/test_admin/admin/admin_views/fabric/')
  2851. self.assertEqual(get_max_age(response), 0)
  2852. def testModelAdd(self):
  2853. "Check the never-cache status of a model add page"
  2854. response = self.client.get('/test_admin/admin/admin_views/fabric/add/')
  2855. self.assertEqual(get_max_age(response), 0)
  2856. def testModelView(self):
  2857. "Check the never-cache status of a model edit page"
  2858. response = self.client.get('/test_admin/admin/admin_views/section/1/')
  2859. self.assertEqual(get_max_age(response), 0)
  2860. def testModelHistory(self):
  2861. "Check the never-cache status of a model history page"
  2862. response = self.client.get('/test_admin/admin/admin_views/section/1/history/')
  2863. self.assertEqual(get_max_age(response), 0)
  2864. def testModelDelete(self):
  2865. "Check the never-cache status of a model delete page"
  2866. response = self.client.get('/test_admin/admin/admin_views/section/1/delete/')
  2867. self.assertEqual(get_max_age(response), 0)
  2868. def testLogin(self):
  2869. "Check the never-cache status of login views"
  2870. self.client.logout()
  2871. response = self.client.get('/test_admin/admin/')
  2872. self.assertEqual(get_max_age(response), 0)
  2873. def testLogout(self):
  2874. "Check the never-cache status of logout view"
  2875. response = self.client.get('/test_admin/admin/logout/')
  2876. self.assertEqual(get_max_age(response), 0)
  2877. def testPasswordChange(self):
  2878. "Check the never-cache status of the password change view"
  2879. self.client.logout()
  2880. response = self.client.get('/test_admin/password_change/')
  2881. self.assertEqual(get_max_age(response), None)
  2882. def testPasswordChangeDone(self):
  2883. "Check the never-cache status of the password change done view"
  2884. response = self.client.get('/test_admin/admin/password_change/done/')
  2885. self.assertEqual(get_max_age(response), None)
  2886. def testJsi18n(self):
  2887. "Check the never-cache status of the JavaScript i18n view"
  2888. response = self.client.get('/test_admin/admin/jsi18n/')
  2889. self.assertEqual(get_max_age(response), None)
  2890. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2891. class PrePopulatedTest(TestCase):
  2892. urls = "admin_views.urls"
  2893. fixtures = ['admin-views-users.xml']
  2894. def setUp(self):
  2895. self.client.login(username='super', password='secret')
  2896. def tearDown(self):
  2897. self.client.logout()
  2898. def test_prepopulated_on(self):
  2899. response = self.client.get('/test_admin/admin/admin_views/prepopulatedpost/add/')
  2900. self.assertEqual(response.status_code, 200)
  2901. self.assertContains(response, "id: '#id_slug',")
  2902. self.assertContains(response, "field['dependency_ids'].push('#id_title');")
  2903. self.assertContains(response, "id: '#id_prepopulatedsubpost_set-0-subslug',")
  2904. def test_prepopulated_off(self):
  2905. response = self.client.get('/test_admin/admin/admin_views/prepopulatedpost/1/')
  2906. self.assertEqual(response.status_code, 200)
  2907. self.assertContains(response, "A Long Title")
  2908. self.assertNotContains(response, "id: '#id_slug'")
  2909. self.assertNotContains(response, "field['dependency_ids'].push('#id_title');")
  2910. self.assertNotContains(response, "id: '#id_prepopulatedsubpost_set-0-subslug',")
  2911. @override_settings(USE_THOUSAND_SEPARATOR=True, USE_L10N=True)
  2912. def test_prepopulated_maxlength_localized(self):
  2913. """
  2914. Regression test for #15938: if USE_THOUSAND_SEPARATOR is set, make sure
  2915. that maxLength (in the JavaScript) is rendered without separators.
  2916. """
  2917. response = self.client.get('/test_admin/admin/admin_views/prepopulatedpostlargeslug/add/')
  2918. self.assertContains(response, "maxLength: 1000") # instead of 1,000
  2919. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  2920. class SeleniumAdminViewsFirefoxTests(AdminSeleniumWebDriverTestCase):
  2921. available_apps = ['admin_views'] + AdminSeleniumWebDriverTestCase.available_apps
  2922. fixtures = ['admin-views-users.xml']
  2923. urls = "admin_views.urls"
  2924. webdriver_class = 'selenium.webdriver.firefox.webdriver.WebDriver'
  2925. def test_prepopulated_fields(self):
  2926. """
  2927. Ensure that the JavaScript-automated prepopulated fields work with the
  2928. main form and with stacked and tabular inlines.
  2929. Refs #13068, #9264, #9983, #9784.
  2930. """
  2931. self.admin_login(username='super', password='secret', login_url='/test_admin/admin/')
  2932. self.selenium.get('%s%s' % (self.live_server_url,
  2933. '/test_admin/admin/admin_views/mainprepopulated/add/'))
  2934. # Main form ----------------------------------------------------------
  2935. self.selenium.find_element_by_css_selector('#id_pubdate').send_keys('2012-02-18')
  2936. self.get_select_option('#id_status', 'option two').click()
  2937. self.selenium.find_element_by_css_selector('#id_name').send_keys(' this is the mAin nÀMë and it\'s awεšome')
  2938. slug1 = self.selenium.find_element_by_css_selector('#id_slug1').get_attribute('value')
  2939. slug2 = self.selenium.find_element_by_css_selector('#id_slug2').get_attribute('value')
  2940. self.assertEqual(slug1, 'main-name-and-its-awesome-2012-02-18')
  2941. self.assertEqual(slug2, 'option-two-main-name-and-its-awesome')
  2942. # Stacked inlines ----------------------------------------------------
  2943. # Initial inline
  2944. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-0-pubdate').send_keys('2011-12-17')
  2945. self.get_select_option('#id_relatedprepopulated_set-0-status', 'option one').click()
  2946. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-0-name').send_keys(' here is a sŤāÇkeð inline ! ')
  2947. slug1 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-0-slug1').get_attribute('value')
  2948. slug2 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-0-slug2').get_attribute('value')
  2949. self.assertEqual(slug1, 'here-stacked-inline-2011-12-17')
  2950. self.assertEqual(slug2, 'option-one-here-stacked-inline')
  2951. # Add an inline
  2952. self.selenium.find_elements_by_link_text('Add another Related prepopulated')[0].click()
  2953. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-1-pubdate').send_keys('1999-01-25')
  2954. self.get_select_option('#id_relatedprepopulated_set-1-status', 'option two').click()
  2955. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-1-name').send_keys(' now you haVe anöther sŤāÇkeð inline with a very ... loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooog text... ')
  2956. slug1 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-1-slug1').get_attribute('value')
  2957. slug2 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-1-slug2').get_attribute('value')
  2958. self.assertEqual(slug1, 'now-you-have-another-stacked-inline-very-loooooooo') # 50 characters maximum for slug1 field
  2959. self.assertEqual(slug2, 'option-two-now-you-have-another-stacked-inline-very-looooooo') # 60 characters maximum for slug2 field
  2960. # Tabular inlines ----------------------------------------------------
  2961. # Initial inline
  2962. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-0-pubdate').send_keys('1234-12-07')
  2963. self.get_select_option('#id_relatedprepopulated_set-2-0-status', 'option two').click()
  2964. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-0-name').send_keys('And now, with a tÃbűlaŘ inline !!!')
  2965. slug1 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-0-slug1').get_attribute('value')
  2966. slug2 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-0-slug2').get_attribute('value')
  2967. self.assertEqual(slug1, 'and-now-tabular-inline-1234-12-07')
  2968. self.assertEqual(slug2, 'option-two-and-now-tabular-inline')
  2969. # Add an inline
  2970. self.selenium.find_elements_by_link_text('Add another Related prepopulated')[1].click()
  2971. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-1-pubdate').send_keys('1981-08-22')
  2972. self.get_select_option('#id_relatedprepopulated_set-2-1-status', 'option one').click()
  2973. self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-1-name').send_keys('a tÃbűlaŘ inline with ignored ;"&*^\%$#@-/`~ characters')
  2974. slug1 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-1-slug1').get_attribute('value')
  2975. slug2 = self.selenium.find_element_by_css_selector('#id_relatedprepopulated_set-2-1-slug2').get_attribute('value')
  2976. self.assertEqual(slug1, 'tabular-inline-ignored-characters-1981-08-22')
  2977. self.assertEqual(slug2, 'option-one-tabular-inline-ignored-characters')
  2978. # Save and check that everything is properly stored in the database
  2979. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  2980. self.wait_page_loaded()
  2981. self.assertEqual(MainPrepopulated.objects.all().count(), 1)
  2982. MainPrepopulated.objects.get(
  2983. name=' this is the mAin nÀMë and it\'s awεšome',
  2984. pubdate='2012-02-18',
  2985. status='option two',
  2986. slug1='main-name-and-its-awesome-2012-02-18',
  2987. slug2='option-two-main-name-and-its-awesome',
  2988. )
  2989. self.assertEqual(RelatedPrepopulated.objects.all().count(), 4)
  2990. RelatedPrepopulated.objects.get(
  2991. name=' here is a sŤāÇkeð inline ! ',
  2992. pubdate='2011-12-17',
  2993. status='option one',
  2994. slug1='here-stacked-inline-2011-12-17',
  2995. slug2='option-one-here-stacked-inline',
  2996. )
  2997. RelatedPrepopulated.objects.get(
  2998. name=' now you haVe anöther sŤāÇkeð inline with a very ... loooooooooooooooooo', # 75 characters in name field
  2999. pubdate='1999-01-25',
  3000. status='option two',
  3001. slug1='now-you-have-another-stacked-inline-very-loooooooo',
  3002. slug2='option-two-now-you-have-another-stacked-inline-very-looooooo',
  3003. )
  3004. RelatedPrepopulated.objects.get(
  3005. name='And now, with a tÃbűlaŘ inline !!!',
  3006. pubdate='1234-12-07',
  3007. status='option two',
  3008. slug1='and-now-tabular-inline-1234-12-07',
  3009. slug2='option-two-and-now-tabular-inline',
  3010. )
  3011. RelatedPrepopulated.objects.get(
  3012. name='a tÃbűlaŘ inline with ignored ;"&*^\%$#@-/`~ characters',
  3013. pubdate='1981-08-22',
  3014. status='option one',
  3015. slug1='tabular-inline-ignored-characters-1981-08-22',
  3016. slug2='option-one-tabular-inline-ignored-characters',
  3017. )
  3018. def test_populate_existing_object(self):
  3019. """
  3020. Ensure that the prepopulation works for existing objects too, as long
  3021. as the original field is empty.
  3022. Refs #19082.
  3023. """
  3024. # Slugs are empty to start with.
  3025. item = MainPrepopulated.objects.create(
  3026. name=' this is the mAin nÀMë',
  3027. pubdate='2012-02-18',
  3028. status='option two',
  3029. slug1='',
  3030. slug2='',
  3031. )
  3032. self.admin_login(username='super',
  3033. password='secret',
  3034. login_url='/test_admin/admin/')
  3035. object_url = '%s%s' % (
  3036. self.live_server_url,
  3037. '/test_admin/admin/admin_views/mainprepopulated/{}/'.format(item.id))
  3038. self.selenium.get(object_url)
  3039. self.selenium.find_element_by_css_selector('#id_name').send_keys(' the best')
  3040. # The slugs got prepopulated since they were originally empty
  3041. slug1 = self.selenium.find_element_by_css_selector('#id_slug1').get_attribute('value')
  3042. slug2 = self.selenium.find_element_by_css_selector('#id_slug2').get_attribute('value')
  3043. self.assertEqual(slug1, 'main-name-best-2012-02-18')
  3044. self.assertEqual(slug2, 'option-two-main-name-best')
  3045. # Save the object
  3046. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  3047. self.wait_page_loaded()
  3048. self.selenium.get(object_url)
  3049. self.selenium.find_element_by_css_selector('#id_name').send_keys(' hello')
  3050. # The slugs got prepopulated didn't change since they were originally not empty
  3051. slug1 = self.selenium.find_element_by_css_selector('#id_slug1').get_attribute('value')
  3052. slug2 = self.selenium.find_element_by_css_selector('#id_slug2').get_attribute('value')
  3053. self.assertEqual(slug1, 'main-name-best-2012-02-18')
  3054. self.assertEqual(slug2, 'option-two-main-name-best')
  3055. def test_collapsible_fieldset(self):
  3056. """
  3057. Test that the 'collapse' class in fieldsets definition allows to
  3058. show/hide the appropriate field section.
  3059. """
  3060. self.admin_login(username='super', password='secret', login_url='/test_admin/admin/')
  3061. self.selenium.get('%s%s' % (self.live_server_url,
  3062. '/test_admin/admin/admin_views/article/add/'))
  3063. self.assertFalse(self.selenium.find_element_by_id('id_title').is_displayed())
  3064. self.selenium.find_elements_by_link_text('Show')[0].click()
  3065. self.assertTrue(self.selenium.find_element_by_id('id_title').is_displayed())
  3066. self.assertEqual(
  3067. self.selenium.find_element_by_id('fieldsetcollapser0').text,
  3068. "Hide"
  3069. )
  3070. def test_first_field_focus(self):
  3071. """JavaScript-assisted auto-focus on first usable form field."""
  3072. # First form field has a single widget
  3073. self.admin_login(username='super', password='secret', login_url='/test_admin/admin/')
  3074. self.selenium.get('%s%s' % (self.live_server_url,
  3075. '/test_admin/admin/admin_views/picture/add/'))
  3076. self.assertEqual(
  3077. self.selenium.switch_to_active_element(),
  3078. self.selenium.find_element_by_id('id_name')
  3079. )
  3080. # First form field has a MultiWidget
  3081. self.selenium.get('%s%s' % (self.live_server_url,
  3082. '/test_admin/admin/admin_views/reservation/add/'))
  3083. self.assertEqual(
  3084. self.selenium.switch_to_active_element(),
  3085. self.selenium.find_element_by_id('id_start_date_0')
  3086. )
  3087. class SeleniumAdminViewsChromeTests(SeleniumAdminViewsFirefoxTests):
  3088. webdriver_class = 'selenium.webdriver.chrome.webdriver.WebDriver'
  3089. class SeleniumAdminViewsIETests(SeleniumAdminViewsFirefoxTests):
  3090. webdriver_class = 'selenium.webdriver.ie.webdriver.WebDriver'
  3091. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3092. class ReadonlyTest(TestCase):
  3093. urls = "admin_views.urls"
  3094. fixtures = ['admin-views-users.xml']
  3095. def setUp(self):
  3096. self.client.login(username='super', password='secret')
  3097. def tearDown(self):
  3098. self.client.logout()
  3099. def test_readonly_get(self):
  3100. response = self.client.get('/test_admin/admin/admin_views/post/add/')
  3101. self.assertEqual(response.status_code, 200)
  3102. self.assertNotContains(response, 'name="posted"')
  3103. # 3 fields + 2 submit buttons + 5 inline management form fields, + 2
  3104. # hidden fields for inlines + 1 field for the inline + 2 empty form
  3105. self.assertContains(response, "<input", count=15)
  3106. self.assertContains(response, formats.localize(datetime.date.today()))
  3107. self.assertContains(response,
  3108. "<label>Awesomeness level:</label>")
  3109. self.assertContains(response, "Very awesome.")
  3110. self.assertContains(response, "Unkown coolness.")
  3111. self.assertContains(response, "foo")
  3112. # Checks that multiline text in a readonly field gets <br /> tags
  3113. self.assertContains(response, "Multiline<br />test<br />string")
  3114. self.assertContains(response, "<p>Multiline<br />html<br />content</p>", html=True)
  3115. self.assertContains(response, "InlineMultiline<br />test<br />string")
  3116. self.assertContains(response,
  3117. formats.localize(datetime.date.today() - datetime.timedelta(days=7)))
  3118. self.assertContains(response, '<div class="form-row field-coolness">')
  3119. self.assertContains(response, '<div class="form-row field-awesomeness_level">')
  3120. self.assertContains(response, '<div class="form-row field-posted">')
  3121. self.assertContains(response, '<div class="form-row field-value">')
  3122. self.assertContains(response, '<div class="form-row">')
  3123. self.assertContains(response, '<p class="help">', 3)
  3124. self.assertContains(response, '<p class="help">Some help text for the title (with unicode ŠĐĆŽćžšđ)</p>', html=True)
  3125. self.assertContains(response, '<p class="help">Some help text for the content (with unicode ŠĐĆŽćžšđ)</p>', html=True)
  3126. self.assertContains(response, '<p class="help">Some help text for the date (with unicode ŠĐĆŽćžšđ)</p>', html=True)
  3127. p = Post.objects.create(title="I worked on readonly_fields", content="Its good stuff")
  3128. response = self.client.get('/test_admin/admin/admin_views/post/%d/' % p.pk)
  3129. self.assertContains(response, "%d amount of cool" % p.pk)
  3130. def test_readonly_post(self):
  3131. data = {
  3132. "title": "Django Got Readonly Fields",
  3133. "content": "This is an incredible development.",
  3134. "link_set-TOTAL_FORMS": "1",
  3135. "link_set-INITIAL_FORMS": "0",
  3136. "link_set-MAX_NUM_FORMS": "0",
  3137. }
  3138. response = self.client.post('/test_admin/admin/admin_views/post/add/', data)
  3139. self.assertEqual(response.status_code, 302)
  3140. self.assertEqual(Post.objects.count(), 1)
  3141. p = Post.objects.get()
  3142. self.assertEqual(p.posted, datetime.date.today())
  3143. data["posted"] = "10-8-1990" # some date that's not today
  3144. response = self.client.post('/test_admin/admin/admin_views/post/add/', data)
  3145. self.assertEqual(response.status_code, 302)
  3146. self.assertEqual(Post.objects.count(), 2)
  3147. p = Post.objects.order_by('-id')[0]
  3148. self.assertEqual(p.posted, datetime.date.today())
  3149. def test_readonly_manytomany(self):
  3150. "Regression test for #13004"
  3151. response = self.client.get('/test_admin/admin/admin_views/pizza/add/')
  3152. self.assertEqual(response.status_code, 200)
  3153. def test_user_password_change_limited_queryset(self):
  3154. su = User.objects.filter(is_superuser=True)[0]
  3155. response = self.client.get('/test_admin/admin2/auth/user/%s/password/' % su.pk)
  3156. self.assertEqual(response.status_code, 404)
  3157. def test_change_form_renders_correct_null_choice_value(self):
  3158. """
  3159. Regression test for #17911.
  3160. """
  3161. choice = Choice.objects.create(choice=None)
  3162. response = self.client.get('/test_admin/admin/admin_views/choice/%s/' % choice.pk)
  3163. self.assertContains(response, '<p>No opinion</p>', html=True)
  3164. self.assertNotContains(response, '<p>(None)</p>')
  3165. def test_readonly_backwards_ref(self):
  3166. """
  3167. Regression test for #16433 - backwards references for related objects
  3168. broke if the related field is read-only due to the help_text attribute
  3169. """
  3170. topping = Topping.objects.create(name='Salami')
  3171. pizza = Pizza.objects.create(name='Americano')
  3172. pizza.toppings.add(topping)
  3173. response = self.client.get('/test_admin/admin/admin_views/topping/add/')
  3174. self.assertEqual(response.status_code, 200)
  3175. def test_readonly_field_overrides(self):
  3176. """
  3177. Regression test for #22087 - ModelForm Meta overrides are ignored by
  3178. AdminReadonlyField
  3179. """
  3180. p = FieldOverridePost.objects.create(title="Test Post", content="Test Content")
  3181. response = self.client.get('/test_admin/admin/admin_views/fieldoverridepost/%d/' % p.pk)
  3182. self.assertEqual(response.status_code, 200)
  3183. self.assertContains(response, '<p class="help">Overridden help text for the date</p>')
  3184. self.assertContains(response, '<label for="id_public">Overridden public label:</label>', html=True)
  3185. self.assertNotContains(response, "Some help text for the date (with unicode ŠĐĆŽćžšđ)")
  3186. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3187. class LimitChoicesToInAdminTest(TestCase):
  3188. urls = "admin_views.urls"
  3189. fixtures = ['admin-views-users.xml']
  3190. def setUp(self):
  3191. self.client.login(username='super', password='secret')
  3192. def tearDown(self):
  3193. self.client.logout()
  3194. def test_limit_choices_to_as_callable(self):
  3195. """Test for ticket 2445 changes to admin."""
  3196. threepwood = Character.objects.create(
  3197. username='threepwood',
  3198. last_action=datetime.datetime.today() + datetime.timedelta(days=1),
  3199. )
  3200. marley = Character.objects.create(
  3201. username='marley',
  3202. last_action=datetime.datetime.today() - datetime.timedelta(days=1),
  3203. )
  3204. response = self.client.get('/test_admin/admin/admin_views/stumpjoke/add/')
  3205. # The allowed option should appear twice; the limited option should not appear.
  3206. self.assertContains(response, threepwood.username, count=2)
  3207. self.assertNotContains(response, marley.username)
  3208. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3209. class RawIdFieldsTest(TestCase):
  3210. urls = "admin_views.urls"
  3211. fixtures = ['admin-views-users.xml']
  3212. def setUp(self):
  3213. self.client.login(username='super', password='secret')
  3214. def tearDown(self):
  3215. self.client.logout()
  3216. def test_limit_choices_to(self):
  3217. """Regression test for 14880"""
  3218. actor = Actor.objects.create(name="Palin", age=27)
  3219. Inquisition.objects.create(expected=True,
  3220. leader=actor,
  3221. country="England")
  3222. Inquisition.objects.create(expected=False,
  3223. leader=actor,
  3224. country="Spain")
  3225. response = self.client.get('/test_admin/admin/admin_views/sketch/add/')
  3226. # Find the link
  3227. m = re.search(br'<a href="([^"]*)"[^>]* id="lookup_id_inquisition"', response.content)
  3228. self.assertTrue(m) # Got a match
  3229. popup_url = m.groups()[0].decode().replace("&amp;", "&")
  3230. # Handle relative links
  3231. popup_url = urljoin(response.request['PATH_INFO'], popup_url)
  3232. # Get the popup and verify the correct objects show up in the resulting
  3233. # page. This step also tests integers, strings and booleans in the
  3234. # lookup query string; in model we define inquisition field to have a
  3235. # limit_choices_to option that includes a filter on a string field
  3236. # (inquisition__actor__name), a filter on an integer field
  3237. # (inquisition__actor__age), and a filter on a boolean field
  3238. # (inquisition__expected).
  3239. response2 = self.client.get(popup_url)
  3240. self.assertContains(response2, "Spain")
  3241. self.assertNotContains(response2, "England")
  3242. def test_limit_choices_to_isnull_false(self):
  3243. """Regression test for 20182"""
  3244. Actor.objects.create(name="Palin", age=27)
  3245. Actor.objects.create(name="Kilbraken", age=50, title="Judge")
  3246. response = self.client.get('/test_admin/admin/admin_views/sketch/add/')
  3247. # Find the link
  3248. m = re.search(br'<a href="([^"]*)"[^>]* id="lookup_id_defendant0"', response.content)
  3249. self.assertTrue(m) # Got a match
  3250. popup_url = m.groups()[0].decode().replace("&amp;", "&")
  3251. # Handle relative links
  3252. popup_url = urljoin(response.request['PATH_INFO'], popup_url)
  3253. # Get the popup and verify the correct objects show up in the resulting
  3254. # page. This step tests field__isnull=0 gets parsed correctly from the
  3255. # lookup query string; in model we define defendant0 field to have a
  3256. # limit_choices_to option that includes "actor__title__isnull=False".
  3257. response2 = self.client.get(popup_url)
  3258. self.assertContains(response2, "Kilbraken")
  3259. self.assertNotContains(response2, "Palin")
  3260. def test_limit_choices_to_isnull_true(self):
  3261. """Regression test for 20182"""
  3262. Actor.objects.create(name="Palin", age=27)
  3263. Actor.objects.create(name="Kilbraken", age=50, title="Judge")
  3264. response = self.client.get('/test_admin/admin/admin_views/sketch/add/')
  3265. # Find the link
  3266. m = re.search(br'<a href="([^"]*)"[^>]* id="lookup_id_defendant1"', response.content)
  3267. self.assertTrue(m) # Got a match
  3268. popup_url = m.groups()[0].decode().replace("&amp;", "&")
  3269. # Handle relative links
  3270. popup_url = urljoin(response.request['PATH_INFO'], popup_url)
  3271. # Get the popup and verify the correct objects show up in the resulting
  3272. # page. This step tests field__isnull=1 gets parsed correctly from the
  3273. # lookup query string; in model we define defendant1 field to have a
  3274. # limit_choices_to option that includes "actor__title__isnull=True".
  3275. response2 = self.client.get(popup_url)
  3276. self.assertNotContains(response2, "Kilbraken")
  3277. self.assertContains(response2, "Palin")
  3278. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3279. class UserAdminTest(TestCase):
  3280. """
  3281. Tests user CRUD functionality.
  3282. """
  3283. urls = "admin_views.urls"
  3284. fixtures = ['admin-views-users.xml']
  3285. def setUp(self):
  3286. self.client.login(username='super', password='secret')
  3287. def tearDown(self):
  3288. self.client.logout()
  3289. def test_save_button(self):
  3290. user_count = User.objects.count()
  3291. response = self.client.post('/test_admin/admin/auth/user/add/', {
  3292. 'username': 'newuser',
  3293. 'password1': 'newpassword',
  3294. 'password2': 'newpassword',
  3295. })
  3296. new_user = User.objects.order_by('-id')[0]
  3297. self.assertRedirects(response, '/test_admin/admin/auth/user/%s/' % new_user.pk)
  3298. self.assertEqual(User.objects.count(), user_count + 1)
  3299. self.assertTrue(new_user.has_usable_password())
  3300. def test_save_continue_editing_button(self):
  3301. user_count = User.objects.count()
  3302. response = self.client.post('/test_admin/admin/auth/user/add/', {
  3303. 'username': 'newuser',
  3304. 'password1': 'newpassword',
  3305. 'password2': 'newpassword',
  3306. '_continue': '1',
  3307. })
  3308. new_user = User.objects.order_by('-id')[0]
  3309. self.assertRedirects(response, '/test_admin/admin/auth/user/%s/' % new_user.pk)
  3310. self.assertEqual(User.objects.count(), user_count + 1)
  3311. self.assertTrue(new_user.has_usable_password())
  3312. def test_password_mismatch(self):
  3313. response = self.client.post('/test_admin/admin/auth/user/add/', {
  3314. 'username': 'newuser',
  3315. 'password1': 'newpassword',
  3316. 'password2': 'mismatch',
  3317. })
  3318. self.assertEqual(response.status_code, 200)
  3319. adminform = response.context['adminform']
  3320. self.assertTrue('password' not in adminform.form.errors)
  3321. self.assertEqual(adminform.form.errors['password2'],
  3322. ["The two password fields didn't match."])
  3323. def test_user_fk_popup(self):
  3324. """Quick user addition in a FK popup shouldn't invoke view for further user customization"""
  3325. response = self.client.get('/test_admin/admin/admin_views/album/add/')
  3326. self.assertEqual(response.status_code, 200)
  3327. self.assertContains(response, '/test_admin/admin/auth/user/add')
  3328. self.assertContains(response, 'class="add-another" id="add_id_owner" onclick="return showAddAnotherPopup(this);"')
  3329. response = self.client.get('/test_admin/admin/auth/user/add/?_popup=1')
  3330. self.assertEqual(response.status_code, 200)
  3331. self.assertNotContains(response, 'name="_continue"')
  3332. self.assertNotContains(response, 'name="_addanother"')
  3333. data = {
  3334. 'username': 'newuser',
  3335. 'password1': 'newpassword',
  3336. 'password2': 'newpassword',
  3337. '_popup': '1',
  3338. '_save': '1',
  3339. }
  3340. response = self.client.post('/test_admin/admin/auth/user/add/?_popup=1', data, follow=True)
  3341. self.assertEqual(response.status_code, 200)
  3342. self.assertContains(response, 'dismissAddAnotherPopup')
  3343. def test_save_add_another_button(self):
  3344. user_count = User.objects.count()
  3345. response = self.client.post('/test_admin/admin/auth/user/add/', {
  3346. 'username': 'newuser',
  3347. 'password1': 'newpassword',
  3348. 'password2': 'newpassword',
  3349. '_addanother': '1',
  3350. })
  3351. new_user = User.objects.order_by('-id')[0]
  3352. self.assertRedirects(response, '/test_admin/admin/auth/user/add/')
  3353. self.assertEqual(User.objects.count(), user_count + 1)
  3354. self.assertTrue(new_user.has_usable_password())
  3355. def test_user_permission_performance(self):
  3356. u = User.objects.all()[0]
  3357. # Don't depend on a warm cache, see #17377.
  3358. ContentType.objects.clear_cache()
  3359. expected_queries = 10
  3360. # Oracle doesn't implement "RELEASE SAVPOINT", see #20387.
  3361. if connection.vendor == 'oracle':
  3362. expected_queries -= 1
  3363. with self.assertNumQueries(expected_queries):
  3364. response = self.client.get('/test_admin/admin/auth/user/%s/' % u.pk)
  3365. self.assertEqual(response.status_code, 200)
  3366. def test_form_url_present_in_context(self):
  3367. u = User.objects.all()[0]
  3368. response = self.client.get('/test_admin/admin3/auth/user/%s/password/' % u.pk)
  3369. self.assertEqual(response.status_code, 200)
  3370. self.assertEqual(response.context['form_url'], 'pony')
  3371. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3372. class GroupAdminTest(TestCase):
  3373. """
  3374. Tests group CRUD functionality.
  3375. """
  3376. urls = "admin_views.urls"
  3377. fixtures = ['admin-views-users.xml']
  3378. def setUp(self):
  3379. self.client.login(username='super', password='secret')
  3380. def tearDown(self):
  3381. self.client.logout()
  3382. def test_save_button(self):
  3383. group_count = Group.objects.count()
  3384. response = self.client.post('/test_admin/admin/auth/group/add/', {
  3385. 'name': 'newgroup',
  3386. })
  3387. Group.objects.order_by('-id')[0]
  3388. self.assertRedirects(response, '/test_admin/admin/auth/group/')
  3389. self.assertEqual(Group.objects.count(), group_count + 1)
  3390. def test_group_permission_performance(self):
  3391. g = Group.objects.create(name="test_group")
  3392. expected_queries = 8
  3393. # Oracle doesn't implement "RELEASE SAVPOINT", see #20387.
  3394. if connection.vendor == 'oracle':
  3395. expected_queries -= 1
  3396. with self.assertNumQueries(expected_queries):
  3397. response = self.client.get('/test_admin/admin/auth/group/%s/' % g.pk)
  3398. self.assertEqual(response.status_code, 200)
  3399. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3400. class CSSTest(TestCase):
  3401. urls = "admin_views.urls"
  3402. fixtures = ['admin-views-users.xml']
  3403. def setUp(self):
  3404. self.client.login(username='super', password='secret')
  3405. def tearDown(self):
  3406. self.client.logout()
  3407. def test_field_prefix_css_classes(self):
  3408. """
  3409. Ensure that fields have a CSS class name with a 'field-' prefix.
  3410. Refs #16371.
  3411. """
  3412. response = self.client.get('/test_admin/admin/admin_views/post/add/')
  3413. # The main form
  3414. self.assertContains(response, 'class="form-row field-title"')
  3415. self.assertContains(response, 'class="form-row field-content"')
  3416. self.assertContains(response, 'class="form-row field-public"')
  3417. self.assertContains(response, 'class="form-row field-awesomeness_level"')
  3418. self.assertContains(response, 'class="form-row field-coolness"')
  3419. self.assertContains(response, 'class="form-row field-value"')
  3420. self.assertContains(response, 'class="form-row"') # The lambda function
  3421. # The tabular inline
  3422. self.assertContains(response, '<td class="field-url">')
  3423. self.assertContains(response, '<td class="field-posted">')
  3424. def test_index_css_classes(self):
  3425. """
  3426. Ensure that CSS class names are used for each app and model on the
  3427. admin index pages.
  3428. Refs #17050.
  3429. """
  3430. # General index page
  3431. response = self.client.get("/test_admin/admin/")
  3432. self.assertContains(response, '<div class="app-admin_views module">')
  3433. self.assertContains(response, '<tr class="model-actor">')
  3434. self.assertContains(response, '<tr class="model-album">')
  3435. # App index page
  3436. response = self.client.get("/test_admin/admin/admin_views/")
  3437. self.assertContains(response, '<div class="app-admin_views module">')
  3438. self.assertContains(response, '<tr class="model-actor">')
  3439. self.assertContains(response, '<tr class="model-album">')
  3440. def testAppModelInFormBodyClass(self):
  3441. """
  3442. Ensure app and model tag are correctly read by change_form template
  3443. """
  3444. response = self.client.get('/test_admin/admin/admin_views/section/add/')
  3445. self.assertEqual(response.status_code, 200)
  3446. self.assertContains(response,
  3447. '<body class=" app-admin_views model-section ')
  3448. def testAppModelInListBodyClass(self):
  3449. """
  3450. Ensure app and model tag are correctly read by change_list template
  3451. """
  3452. response = self.client.get('/test_admin/admin/admin_views/section/')
  3453. self.assertEqual(response.status_code, 200)
  3454. self.assertContains(response,
  3455. '<body class=" app-admin_views model-section ')
  3456. def testAppModelInDeleteConfirmationBodyClass(self):
  3457. """
  3458. Ensure app and model tag are correctly read by delete_confirmation
  3459. template
  3460. """
  3461. response = self.client.get(
  3462. '/test_admin/admin/admin_views/section/1/delete/')
  3463. self.assertEqual(response.status_code, 200)
  3464. self.assertContains(response,
  3465. '<body class=" app-admin_views model-section ')
  3466. def testAppModelInAppIndexBodyClass(self):
  3467. """
  3468. Ensure app and model tag are correctly read by app_index template
  3469. """
  3470. response = self.client.get('/test_admin/admin/admin_views/')
  3471. self.assertEqual(response.status_code, 200)
  3472. self.assertContains(response, '<body class=" dashboard app-admin_views')
  3473. def testAppModelInDeleteSelectedConfirmationBodyClass(self):
  3474. """
  3475. Ensure app and model tag are correctly read by
  3476. delete_selected_confirmation template
  3477. """
  3478. action_data = {
  3479. ACTION_CHECKBOX_NAME: [1],
  3480. 'action': 'delete_selected',
  3481. 'index': 0,
  3482. }
  3483. response = self.client.post('/test_admin/admin/admin_views/section/',
  3484. action_data)
  3485. self.assertEqual(response.status_code, 200)
  3486. self.assertContains(response,
  3487. '<body class=" app-admin_views model-section ')
  3488. def test_changelist_field_classes(self):
  3489. """
  3490. Cells of the change list table should contain the field name in their class attribute
  3491. Refs #11195.
  3492. """
  3493. Podcast.objects.create(name="Django Dose",
  3494. release_date=datetime.date.today())
  3495. response = self.client.get('/test_admin/admin/admin_views/podcast/')
  3496. self.assertContains(
  3497. response, '<th class="field-name">')
  3498. self.assertContains(
  3499. response, '<td class="field-release_date nowrap">')
  3500. self.assertContains(
  3501. response, '<td class="action-checkbox">')
  3502. try:
  3503. import docutils
  3504. except ImportError:
  3505. docutils = None
  3506. @unittest.skipUnless(docutils, "no docutils installed.")
  3507. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3508. class AdminDocsTest(TestCase):
  3509. urls = "admin_views.urls"
  3510. fixtures = ['admin-views-users.xml']
  3511. def setUp(self):
  3512. self.client.login(username='super', password='secret')
  3513. def tearDown(self):
  3514. self.client.logout()
  3515. def test_tags(self):
  3516. response = self.client.get('/test_admin/admin/doc/tags/')
  3517. # The builtin tag group exists
  3518. self.assertContains(response, "<h2>Built-in tags</h2>", count=2, html=True)
  3519. # A builtin tag exists in both the index and detail
  3520. self.assertContains(response, '<h3 id="built_in-autoescape">autoescape</h3>', html=True)
  3521. self.assertContains(response, '<li><a href="#built_in-autoescape">autoescape</a></li>', html=True)
  3522. # An app tag exists in both the index and detail
  3523. self.assertContains(response, '<h3 id="flatpages-get_flatpages">get_flatpages</h3>', html=True)
  3524. self.assertContains(response, '<li><a href="#flatpages-get_flatpages">get_flatpages</a></li>', html=True)
  3525. # The admin list tag group exists
  3526. self.assertContains(response, "<h2>admin_list</h2>", count=2, html=True)
  3527. # An admin list tag exists in both the index and detail
  3528. self.assertContains(response, '<h3 id="admin_list-admin_actions">admin_actions</h3>', html=True)
  3529. self.assertContains(response, '<li><a href="#admin_list-admin_actions">admin_actions</a></li>', html=True)
  3530. def test_filters(self):
  3531. response = self.client.get('/test_admin/admin/doc/filters/')
  3532. # The builtin filter group exists
  3533. self.assertContains(response, "<h2>Built-in filters</h2>", count=2, html=True)
  3534. # A builtin filter exists in both the index and detail
  3535. self.assertContains(response, '<h3 id="built_in-add">add</h3>', html=True)
  3536. self.assertContains(response, '<li><a href="#built_in-add">add</a></li>', html=True)
  3537. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3538. class ValidXHTMLTests(TestCase):
  3539. urls = "admin_views.urls"
  3540. fixtures = ['admin-views-users.xml']
  3541. urlbit = 'admin'
  3542. def setUp(self):
  3543. self.client.login(username='super', password='secret')
  3544. def tearDown(self):
  3545. self.client.logout()
  3546. @override_settings(
  3547. TEMPLATE_CONTEXT_PROCESSORS=filter(
  3548. lambda t: t != 'django.core.context_processors.i18n',
  3549. global_settings.TEMPLATE_CONTEXT_PROCESSORS),
  3550. USE_I18N=False,
  3551. )
  3552. def testLangNamePresent(self):
  3553. response = self.client.get('/test_admin/%s/admin_views/' % self.urlbit)
  3554. self.assertNotContains(response, ' lang=""')
  3555. self.assertNotContains(response, ' xml:lang=""')
  3556. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',),
  3557. USE_THOUSAND_SEPARATOR=True, USE_L10N=True)
  3558. class DateHierarchyTests(TestCase):
  3559. urls = "admin_views.urls"
  3560. fixtures = ['admin-views-users.xml']
  3561. def setUp(self):
  3562. self.client.login(username='super', password='secret')
  3563. def tearDown(self):
  3564. formats.reset_format_cache()
  3565. def assert_non_localized_year(self, response, year):
  3566. """Ensure that the year is not localized with
  3567. USE_THOUSAND_SEPARATOR. Refs #15234.
  3568. """
  3569. self.assertNotContains(response, formats.number_format(year))
  3570. def assert_contains_year_link(self, response, date):
  3571. self.assertContains(response, '?release_date__year=%d"' % (date.year,))
  3572. def assert_contains_month_link(self, response, date):
  3573. self.assertContains(
  3574. response, '?release_date__month=%d&amp;release_date__year=%d"' % (
  3575. date.month, date.year))
  3576. def assert_contains_day_link(self, response, date):
  3577. self.assertContains(
  3578. response, '?release_date__day=%d&amp;'
  3579. 'release_date__month=%d&amp;release_date__year=%d"' % (
  3580. date.day, date.month, date.year))
  3581. def test_empty(self):
  3582. """
  3583. Ensure that no date hierarchy links display with empty changelist.
  3584. """
  3585. response = self.client.get(
  3586. reverse('admin:admin_views_podcast_changelist'))
  3587. self.assertNotContains(response, 'release_date__year=')
  3588. self.assertNotContains(response, 'release_date__month=')
  3589. self.assertNotContains(response, 'release_date__day=')
  3590. def test_single(self):
  3591. """
  3592. Ensure that single day-level date hierarchy appears for single object.
  3593. """
  3594. DATE = datetime.date(2000, 6, 30)
  3595. Podcast.objects.create(release_date=DATE)
  3596. url = reverse('admin:admin_views_podcast_changelist')
  3597. response = self.client.get(url)
  3598. self.assert_contains_day_link(response, DATE)
  3599. self.assert_non_localized_year(response, 2000)
  3600. def test_within_month(self):
  3601. """
  3602. Ensure that day-level links appear for changelist within single month.
  3603. """
  3604. DATES = (datetime.date(2000, 6, 30),
  3605. datetime.date(2000, 6, 15),
  3606. datetime.date(2000, 6, 3))
  3607. for date in DATES:
  3608. Podcast.objects.create(release_date=date)
  3609. url = reverse('admin:admin_views_podcast_changelist')
  3610. response = self.client.get(url)
  3611. for date in DATES:
  3612. self.assert_contains_day_link(response, date)
  3613. self.assert_non_localized_year(response, 2000)
  3614. def test_within_year(self):
  3615. """
  3616. Ensure that month-level links appear for changelist within single year.
  3617. """
  3618. DATES = (datetime.date(2000, 1, 30),
  3619. datetime.date(2000, 3, 15),
  3620. datetime.date(2000, 5, 3))
  3621. for date in DATES:
  3622. Podcast.objects.create(release_date=date)
  3623. url = reverse('admin:admin_views_podcast_changelist')
  3624. response = self.client.get(url)
  3625. # no day-level links
  3626. self.assertNotContains(response, 'release_date__day=')
  3627. for date in DATES:
  3628. self.assert_contains_month_link(response, date)
  3629. self.assert_non_localized_year(response, 2000)
  3630. def test_multiple_years(self):
  3631. """
  3632. Ensure that year-level links appear for year-spanning changelist.
  3633. """
  3634. DATES = (datetime.date(2001, 1, 30),
  3635. datetime.date(2003, 3, 15),
  3636. datetime.date(2005, 5, 3))
  3637. for date in DATES:
  3638. Podcast.objects.create(release_date=date)
  3639. response = self.client.get(
  3640. reverse('admin:admin_views_podcast_changelist'))
  3641. # no day/month-level links
  3642. self.assertNotContains(response, 'release_date__day=')
  3643. self.assertNotContains(response, 'release_date__month=')
  3644. for date in DATES:
  3645. self.assert_contains_year_link(response, date)
  3646. # and make sure GET parameters still behave correctly
  3647. for date in DATES:
  3648. url = '%s?release_date__year=%d' % (
  3649. reverse('admin:admin_views_podcast_changelist'),
  3650. date.year)
  3651. response = self.client.get(url)
  3652. self.assert_contains_month_link(response, date)
  3653. self.assert_non_localized_year(response, 2000)
  3654. self.assert_non_localized_year(response, 2003)
  3655. self.assert_non_localized_year(response, 2005)
  3656. url = '%s?release_date__year=%d&release_date__month=%d' % (
  3657. reverse('admin:admin_views_podcast_changelist'),
  3658. date.year, date.month)
  3659. response = self.client.get(url)
  3660. self.assert_contains_day_link(response, date)
  3661. self.assert_non_localized_year(response, 2000)
  3662. self.assert_non_localized_year(response, 2003)
  3663. self.assert_non_localized_year(response, 2005)
  3664. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3665. class AdminCustomSaveRelatedTests(TestCase):
  3666. """
  3667. Ensure that one can easily customize the way related objects are saved.
  3668. Refs #16115.
  3669. """
  3670. urls = "admin_views.urls"
  3671. fixtures = ['admin-views-users.xml']
  3672. def setUp(self):
  3673. self.client.login(username='super', password='secret')
  3674. def test_should_be_able_to_edit_related_objects_on_add_view(self):
  3675. post = {
  3676. 'child_set-TOTAL_FORMS': '3',
  3677. 'child_set-INITIAL_FORMS': '0',
  3678. 'name': 'Josh Stone',
  3679. 'child_set-0-name': 'Paul',
  3680. 'child_set-1-name': 'Catherine',
  3681. }
  3682. self.client.post('/test_admin/admin/admin_views/parent/add/', post)
  3683. self.assertEqual(1, Parent.objects.count())
  3684. self.assertEqual(2, Child.objects.count())
  3685. children_names = list(Child.objects.order_by('name').values_list('name', flat=True))
  3686. self.assertEqual('Josh Stone', Parent.objects.latest('id').name)
  3687. self.assertEqual(['Catherine Stone', 'Paul Stone'], children_names)
  3688. def test_should_be_able_to_edit_related_objects_on_change_view(self):
  3689. parent = Parent.objects.create(name='Josh Stone')
  3690. paul = Child.objects.create(parent=parent, name='Paul')
  3691. catherine = Child.objects.create(parent=parent, name='Catherine')
  3692. post = {
  3693. 'child_set-TOTAL_FORMS': '5',
  3694. 'child_set-INITIAL_FORMS': '2',
  3695. 'name': 'Josh Stone',
  3696. 'child_set-0-name': 'Paul',
  3697. 'child_set-0-id': paul.id,
  3698. 'child_set-1-name': 'Catherine',
  3699. 'child_set-1-id': catherine.id,
  3700. }
  3701. self.client.post('/test_admin/admin/admin_views/parent/%s/' % parent.id, post)
  3702. children_names = list(Child.objects.order_by('name').values_list('name', flat=True))
  3703. self.assertEqual('Josh Stone', Parent.objects.latest('id').name)
  3704. self.assertEqual(['Catherine Stone', 'Paul Stone'], children_names)
  3705. def test_should_be_able_to_edit_related_objects_on_changelist_view(self):
  3706. parent = Parent.objects.create(name='Josh Rock')
  3707. Child.objects.create(parent=parent, name='Paul')
  3708. Child.objects.create(parent=parent, name='Catherine')
  3709. post = {
  3710. 'form-TOTAL_FORMS': '1',
  3711. 'form-INITIAL_FORMS': '1',
  3712. 'form-MAX_NUM_FORMS': '0',
  3713. 'form-0-id': parent.id,
  3714. 'form-0-name': 'Josh Stone',
  3715. '_save': 'Save'
  3716. }
  3717. self.client.post('/test_admin/admin/admin_views/parent/', post)
  3718. children_names = list(Child.objects.order_by('name').values_list('name', flat=True))
  3719. self.assertEqual('Josh Stone', Parent.objects.latest('id').name)
  3720. self.assertEqual(['Catherine Stone', 'Paul Stone'], children_names)
  3721. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3722. class AdminViewLogoutTest(TestCase):
  3723. urls = "admin_views.urls"
  3724. fixtures = ['admin-views-users.xml']
  3725. def setUp(self):
  3726. self.client.login(username='super', password='secret')
  3727. def tearDown(self):
  3728. self.client.logout()
  3729. def test_client_logout_url_can_be_used_to_login(self):
  3730. response = self.client.get('/test_admin/admin/logout/')
  3731. self.assertEqual(response.status_code, 200)
  3732. self.assertTemplateUsed(response, 'registration/logged_out.html')
  3733. self.assertEqual(response.request['PATH_INFO'], '/test_admin/admin/logout/')
  3734. # we are now logged out
  3735. response = self.client.get('/test_admin/admin/logout/')
  3736. self.assertEqual(response.status_code, 302) # we should be redirected to the login page.
  3737. # follow the redirect and test results.
  3738. response = self.client.get('/test_admin/admin/logout/', follow=True)
  3739. self.assertEqual(response.status_code, 200)
  3740. self.assertTemplateUsed(response, 'admin/login.html')
  3741. self.assertEqual(response.request['PATH_INFO'], '/test_admin/admin/login/')
  3742. self.assertContains(response, '<input type="hidden" name="next" value="/test_admin/admin/" />')
  3743. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3744. class AdminUserMessageTest(TestCase):
  3745. urls = "admin_views.urls"
  3746. fixtures = ['admin-views-users.xml']
  3747. def setUp(self):
  3748. self.client.login(username='super', password='secret')
  3749. def tearDown(self):
  3750. self.client.logout()
  3751. def send_message(self, level):
  3752. """
  3753. Helper that sends a post to the dummy test methods and asserts that a
  3754. message with the level has appeared in the response.
  3755. """
  3756. action_data = {
  3757. ACTION_CHECKBOX_NAME: [1],
  3758. 'action': 'message_%s' % level,
  3759. 'index': 0,
  3760. }
  3761. response = self.client.post('/test_admin/admin/admin_views/usermessenger/',
  3762. action_data, follow=True)
  3763. self.assertContains(response,
  3764. '<li class="%s">Test %s</li>' % (level, level),
  3765. html=True)
  3766. @override_settings(MESSAGE_LEVEL=10) # Set to DEBUG for this request
  3767. def test_message_debug(self):
  3768. self.send_message('debug')
  3769. def test_message_info(self):
  3770. self.send_message('info')
  3771. def test_message_success(self):
  3772. self.send_message('success')
  3773. def test_message_warning(self):
  3774. self.send_message('warning')
  3775. def test_message_error(self):
  3776. self.send_message('error')
  3777. def test_message_extra_tags(self):
  3778. action_data = {
  3779. ACTION_CHECKBOX_NAME: [1],
  3780. 'action': 'message_extra_tags',
  3781. 'index': 0,
  3782. }
  3783. response = self.client.post('/test_admin/admin/admin_views/usermessenger/',
  3784. action_data, follow=True)
  3785. self.assertContains(response,
  3786. '<li class="extra_tag info">Test tags</li>',
  3787. html=True)
  3788. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3789. class AdminKeepChangeListFiltersTests(TestCase):
  3790. urls = "admin_views.urls"
  3791. fixtures = ['admin-views-users.xml']
  3792. admin_site = site
  3793. def setUp(self):
  3794. self.client.login(username='super', password='secret')
  3795. def tearDown(self):
  3796. self.client.logout()
  3797. def get_changelist_filters_querystring(self):
  3798. return urlencode({
  3799. 'is_superuser__exact': 0,
  3800. 'is_staff__exact': 0,
  3801. })
  3802. def get_preserved_filters_querystring(self):
  3803. return urlencode({
  3804. '_changelist_filters': self.get_changelist_filters_querystring()
  3805. })
  3806. def get_sample_user_id(self):
  3807. return 104
  3808. def get_changelist_url(self):
  3809. return '%s?%s' % (
  3810. reverse('admin:auth_user_changelist',
  3811. current_app=self.admin_site.name),
  3812. self.get_changelist_filters_querystring(),
  3813. )
  3814. def get_add_url(self):
  3815. return '%s?%s' % (
  3816. reverse('admin:auth_user_add',
  3817. current_app=self.admin_site.name),
  3818. self.get_preserved_filters_querystring(),
  3819. )
  3820. def get_change_url(self, user_id=None):
  3821. if user_id is None:
  3822. user_id = self.get_sample_user_id()
  3823. return "%s?%s" % (
  3824. reverse('admin:auth_user_change', args=(user_id,),
  3825. current_app=self.admin_site.name),
  3826. self.get_preserved_filters_querystring(),
  3827. )
  3828. def get_history_url(self, user_id=None):
  3829. if user_id is None:
  3830. user_id = self.get_sample_user_id()
  3831. return "%s?%s" % (
  3832. reverse('admin:auth_user_history', args=(user_id,),
  3833. current_app=self.admin_site.name),
  3834. self.get_preserved_filters_querystring(),
  3835. )
  3836. def get_delete_url(self, user_id=None):
  3837. if user_id is None:
  3838. user_id = self.get_sample_user_id()
  3839. return "%s?%s" % (
  3840. reverse('admin:auth_user_delete', args=(user_id,),
  3841. current_app=self.admin_site.name),
  3842. self.get_preserved_filters_querystring(),
  3843. )
  3844. def test_changelist_view(self):
  3845. response = self.client.get(self.get_changelist_url())
  3846. self.assertEqual(response.status_code, 200)
  3847. # Check the `change_view` link has the correct querystring.
  3848. detail_link = """<a href="%s">joepublic</a>""" % self.get_change_url()
  3849. self.assertContains(response, detail_link, count=1)
  3850. def test_change_view(self):
  3851. # Get the `change_view`.
  3852. response = self.client.get(self.get_change_url())
  3853. self.assertEqual(response.status_code, 200)
  3854. # Check the form action.
  3855. form_action = """<form enctype="multipart/form-data" action="?%s" method="post" id="user_form">""" % self.get_preserved_filters_querystring()
  3856. self.assertContains(response, form_action, count=1)
  3857. # Check the history link.
  3858. history_link = """<a href="%s" class="historylink">History</a>""" % self.get_history_url()
  3859. self.assertContains(response, history_link, count=1)
  3860. # Check the delete link.
  3861. delete_link = """<a href="%s" class="deletelink">Delete</a>""" % (self.get_delete_url())
  3862. self.assertContains(response, delete_link, count=1)
  3863. # Test redirect on "Save".
  3864. post_data = {
  3865. 'username': 'joepublic',
  3866. 'last_login_0': '2007-05-30',
  3867. 'last_login_1': '13:20:10',
  3868. 'date_joined_0': '2007-05-30',
  3869. 'date_joined_1': '13:20:10',
  3870. }
  3871. post_data['_save'] = 1
  3872. response = self.client.post(self.get_change_url(), data=post_data)
  3873. self.assertRedirects(response, self.get_changelist_url())
  3874. post_data.pop('_save')
  3875. # Test redirect on "Save and continue".
  3876. post_data['_continue'] = 1
  3877. response = self.client.post(self.get_change_url(), data=post_data)
  3878. self.assertRedirects(response, self.get_change_url())
  3879. post_data.pop('_continue')
  3880. # Test redirect on "Save and add new".
  3881. post_data['_addanother'] = 1
  3882. response = self.client.post(self.get_change_url(), data=post_data)
  3883. self.assertRedirects(response, self.get_add_url())
  3884. post_data.pop('_addanother')
  3885. def test_add_view(self):
  3886. # Get the `add_view`.
  3887. response = self.client.get(self.get_add_url())
  3888. self.assertEqual(response.status_code, 200)
  3889. # Check the form action.
  3890. form_action = """<form enctype="multipart/form-data" action="?%s" method="post" id="user_form">""" % self.get_preserved_filters_querystring()
  3891. self.assertContains(response, form_action, count=1)
  3892. # Test redirect on "Save".
  3893. post_data = {
  3894. 'username': 'dummy',
  3895. 'password1': 'test',
  3896. 'password2': 'test',
  3897. }
  3898. post_data['_save'] = 1
  3899. response = self.client.post(self.get_add_url(), data=post_data)
  3900. self.assertRedirects(response, self.get_change_url(User.objects.latest('pk').pk))
  3901. post_data.pop('_save')
  3902. # Test redirect on "Save and continue".
  3903. post_data['username'] = 'dummy2'
  3904. post_data['_continue'] = 1
  3905. response = self.client.post(self.get_add_url(), data=post_data)
  3906. self.assertRedirects(response, self.get_change_url(User.objects.latest('pk').pk))
  3907. post_data.pop('_continue')
  3908. # Test redirect on "Save and add new".
  3909. post_data['username'] = 'dummy3'
  3910. post_data['_addanother'] = 1
  3911. response = self.client.post(self.get_add_url(), data=post_data)
  3912. self.assertRedirects(response, self.get_add_url())
  3913. post_data.pop('_addanother')
  3914. def test_delete_view(self):
  3915. # Test redirect on "Delete".
  3916. response = self.client.post(self.get_delete_url(), {'post': 'yes'})
  3917. self.assertRedirects(response, self.get_changelist_url())
  3918. class NamespacedAdminKeepChangeListFiltersTests(AdminKeepChangeListFiltersTests):
  3919. admin_site = site2
  3920. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3921. class TestLabelVisibility(TestCase):
  3922. """ #11277 -Labels of hidden fields in admin were not hidden. """
  3923. urls = "admin_views.urls"
  3924. fixtures = ['admin-views-users.xml']
  3925. def setUp(self):
  3926. self.client.login(username='super', password='secret')
  3927. def test_all_fields_visible(self):
  3928. response = self.client.get('/test_admin/admin/admin_views/emptymodelvisible/add/')
  3929. self.assert_fieldline_visible(response)
  3930. self.assert_field_visible(response, 'first')
  3931. self.assert_field_visible(response, 'second')
  3932. def test_all_fields_hidden(self):
  3933. response = self.client.get('/test_admin/admin/admin_views/emptymodelhidden/add/')
  3934. self.assert_fieldline_hidden(response)
  3935. self.assert_field_hidden(response, 'first')
  3936. self.assert_field_hidden(response, 'second')
  3937. def test_mixin(self):
  3938. response = self.client.get('/test_admin/admin/admin_views/emptymodelmixin/add/')
  3939. self.assert_fieldline_visible(response)
  3940. self.assert_field_hidden(response, 'first')
  3941. self.assert_field_visible(response, 'second')
  3942. def assert_field_visible(self, response, field_name):
  3943. self.assertContains(response, '<div class="field-box field-%s">' % field_name)
  3944. def assert_field_hidden(self, response, field_name):
  3945. self.assertContains(response, '<div class="field-box field-%s hidden">' % field_name)
  3946. def assert_fieldline_visible(self, response):
  3947. self.assertContains(response, '<div class="form-row field-first field-second">')
  3948. def assert_fieldline_hidden(self, response):
  3949. self.assertContains(response, '<div class="form-row hidden')
  3950. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  3951. class AdminViewOnSiteTests(TestCase):
  3952. urls = "admin_views.urls"
  3953. fixtures = ['admin-views-users.xml', 'admin-views-restaurants.xml']
  3954. def setUp(self):
  3955. self.client.login(username='super', password='secret')
  3956. def tearDown(self):
  3957. self.client.logout()
  3958. def test_add_view_form_and_formsets_run_validation(self):
  3959. """
  3960. Issue #20522
  3961. Verifying that if the parent form fails validation, the inlines also
  3962. run validation even if validation is contingent on parent form data
  3963. """
  3964. # The form validation should fail because 'some_required_info' is
  3965. # not included on the parent form, and the family_name of the parent
  3966. # does not match that of the child
  3967. post_data = {"family_name": "Test1",
  3968. "dependentchild_set-TOTAL_FORMS": "1",
  3969. "dependentchild_set-INITIAL_FORMS": "0",
  3970. "dependentchild_set-MAX_NUM_FORMS": "1",
  3971. "dependentchild_set-0-id": "",
  3972. "dependentchild_set-0-parent": "",
  3973. "dependentchild_set-0-family_name": "Test2"}
  3974. response = self.client.post('/test_admin/admin/admin_views/parentwithdependentchildren/add/',
  3975. post_data)
  3976. # just verifying the parent form failed validation, as expected --
  3977. # this isn't the regression test
  3978. self.assertTrue('some_required_info' in response.context['adminform'].form.errors)
  3979. # actual regression test
  3980. for error_set in response.context['inline_admin_formset'].formset.errors:
  3981. self.assertEqual(['Children must share a family name with their parents in this contrived test case'],
  3982. error_set.get('__all__'))
  3983. def test_change_view_form_and_formsets_run_validation(self):
  3984. """
  3985. Issue #20522
  3986. Verifying that if the parent form fails validation, the inlines also
  3987. run validation even if validation is contingent on parent form data
  3988. """
  3989. pwdc = ParentWithDependentChildren.objects.create(some_required_info=6,
  3990. family_name="Test1")
  3991. # The form validation should fail because 'some_required_info' is
  3992. # not included on the parent form, and the family_name of the parent
  3993. # does not match that of the child
  3994. post_data = {"family_name": "Test2",
  3995. "dependentchild_set-TOTAL_FORMS": "1",
  3996. "dependentchild_set-INITIAL_FORMS": "0",
  3997. "dependentchild_set-MAX_NUM_FORMS": "1",
  3998. "dependentchild_set-0-id": "",
  3999. "dependentchild_set-0-parent": str(pwdc.id),
  4000. "dependentchild_set-0-family_name": "Test1"}
  4001. response = self.client.post('/test_admin/admin/admin_views/parentwithdependentchildren/%d/'
  4002. % pwdc.id, post_data)
  4003. # just verifying the parent form failed validation, as expected --
  4004. # this isn't the regression test
  4005. self.assertTrue('some_required_info' in response.context['adminform'].form.errors)
  4006. # actual regression test
  4007. for error_set in response.context['inline_admin_formset'].formset.errors:
  4008. self.assertEqual(['Children must share a family name with their parents in this contrived test case'],
  4009. error_set.get('__all__'))
  4010. def test_check(self):
  4011. "Ensure that the view_on_site value is either a boolean or a callable"
  4012. try:
  4013. CityAdmin.view_on_site = True
  4014. self.assertEqual(CityAdmin.check(City), [])
  4015. CityAdmin.view_on_site = False
  4016. self.assertEqual(CityAdmin.check(City), [])
  4017. CityAdmin.view_on_site = lambda obj: obj.get_absolute_url()
  4018. self.assertEqual(CityAdmin.check(City), [])
  4019. CityAdmin.view_on_site = []
  4020. self.assertEqual(CityAdmin.check(City), [
  4021. Error(
  4022. "The value of 'view_on_site' must be a callable or a boolean value.",
  4023. hint=None,
  4024. obj=CityAdmin,
  4025. id='admin.E025',
  4026. ),
  4027. ])
  4028. finally:
  4029. # Restore the original values for the benefit of other tests.
  4030. CityAdmin.view_on_site = True
  4031. def test_false(self):
  4032. "Ensure that the 'View on site' button is not displayed if view_on_site is False"
  4033. response = self.client.get('/test_admin/admin/admin_views/restaurant/1/')
  4034. content_type_pk = ContentType.objects.get_for_model(Restaurant).pk
  4035. self.assertNotContains(response,
  4036. '"/test_admin/admin/r/%s/1/"' % content_type_pk,
  4037. )
  4038. def test_true(self):
  4039. "Ensure that the default behavior is followed if view_on_site is True"
  4040. response = self.client.get('/test_admin/admin/admin_views/city/1/')
  4041. content_type_pk = ContentType.objects.get_for_model(City).pk
  4042. self.assertContains(response,
  4043. '"/test_admin/admin/r/%s/1/"' % content_type_pk,
  4044. )
  4045. def test_callable(self):
  4046. "Ensure that the right link is displayed if view_on_site is a callable"
  4047. response = self.client.get('/test_admin/admin/admin_views/worker/1/')
  4048. worker = Worker.objects.get(pk=1)
  4049. self.assertContains(response,
  4050. '"/worker/%s/%s/"' % (worker.surname, worker.name),
  4051. )
  4052. def test_missing_get_absolute_url(self):
  4053. "Ensure None is returned if model doesn't have get_absolute_url"
  4054. model_admin = ModelAdmin(Worker, None)
  4055. self.assertIsNone(model_admin.get_view_on_site_url(Worker()))
  4056. @override_settings(PASSWORD_HASHERS=('django.contrib.auth.hashers.SHA1PasswordHasher',))
  4057. class InlineAdminViewOnSiteTest(TestCase):
  4058. urls = "admin_views.urls"
  4059. fixtures = ['admin-views-users.xml', 'admin-views-restaurants.xml']
  4060. def setUp(self):
  4061. self.client.login(username='super', password='secret')
  4062. def tearDown(self):
  4063. self.client.logout()
  4064. def test_false(self):
  4065. "Ensure that the 'View on site' button is not displayed if view_on_site is False"
  4066. response = self.client.get('/test_admin/admin/admin_views/state/1/')
  4067. content_type_pk = ContentType.objects.get_for_model(City).pk
  4068. self.assertNotContains(response,
  4069. '/test_admin/admin/r/%s/1/' % content_type_pk,
  4070. )
  4071. def test_true(self):
  4072. "Ensure that the 'View on site' button is displayed if view_on_site is True"
  4073. response = self.client.get('/test_admin/admin/admin_views/city/1/')
  4074. content_type_pk = ContentType.objects.get_for_model(Restaurant).pk
  4075. self.assertContains(response,
  4076. '/test_admin/admin/r/%s/1/' % content_type_pk,
  4077. )
  4078. def test_callable(self):
  4079. "Ensure that the right link is displayed if view_on_site is a callable"
  4080. response = self.client.get('/test_admin/admin/admin_views/restaurant/1/')
  4081. worker = Worker.objects.get(pk=1)
  4082. self.assertContains(response,
  4083. '"/worker_inline/%s/%s/"' % (worker.surname, worker.name),
  4084. )
  4085. class AdminGenericRelationTests(TestCase):
  4086. def test_generic_relation_fk_list_filter(self):
  4087. """
  4088. Validates a model with a generic relation to a model with
  4089. a foreign key can specify the generic+fk relationship
  4090. path as a list_filter. See trac #21428.
  4091. """
  4092. class GenericFKAdmin(ModelAdmin):
  4093. list_filter = ('tags__content_type',)
  4094. validator = ModelAdminValidator()
  4095. try:
  4096. validator.validate_list_filter(GenericFKAdmin, Plot)
  4097. except ImproperlyConfigured:
  4098. self.fail("Couldn't validate a GenericRelation -> FK path in ModelAdmin.list_filter")