tests.py 278 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023302430253026302730283029303030313032303330343035303630373038303930403041304230433044304530463047304830493050305130523053305430553056305730583059306030613062306330643065306630673068306930703071307230733074307530763077307830793080308130823083308430853086308730883089309030913092309330943095309630973098309931003101310231033104310531063107310831093110311131123113311431153116311731183119312031213122312331243125312631273128312931303131313231333134313531363137313831393140314131423143314431453146314731483149315031513152315331543155315631573158315931603161316231633164316531663167316831693170317131723173317431753176317731783179318031813182318331843185318631873188318931903191319231933194319531963197319831993200320132023203320432053206320732083209321032113212321332143215321632173218321932203221322232233224322532263227322832293230323132323233323432353236323732383239324032413242324332443245324632473248324932503251325232533254325532563257325832593260326132623263326432653266326732683269327032713272327332743275327632773278327932803281328232833284328532863287328832893290329132923293329432953296329732983299330033013302330333043305330633073308330933103311331233133314331533163317331833193320332133223323332433253326332733283329333033313332333333343335333633373338333933403341334233433344334533463347334833493350335133523353335433553356335733583359336033613362336333643365336633673368336933703371337233733374337533763377337833793380338133823383338433853386338733883389339033913392339333943395339633973398339934003401340234033404340534063407340834093410341134123413341434153416341734183419342034213422342334243425342634273428342934303431343234333434343534363437343834393440344134423443344434453446344734483449345034513452345334543455345634573458345934603461346234633464346534663467346834693470347134723473347434753476347734783479348034813482348334843485348634873488348934903491349234933494349534963497349834993500350135023503350435053506350735083509351035113512351335143515351635173518351935203521352235233524352535263527352835293530353135323533353435353536353735383539354035413542354335443545354635473548354935503551355235533554355535563557355835593560356135623563356435653566356735683569357035713572357335743575357635773578357935803581358235833584358535863587358835893590359135923593359435953596359735983599360036013602360336043605360636073608360936103611361236133614361536163617361836193620362136223623362436253626362736283629363036313632363336343635363636373638363936403641364236433644364536463647364836493650365136523653365436553656365736583659366036613662366336643665366636673668366936703671367236733674367536763677367836793680368136823683368436853686368736883689369036913692369336943695369636973698369937003701370237033704370537063707370837093710371137123713371437153716371737183719372037213722372337243725372637273728372937303731373237333734373537363737373837393740374137423743374437453746374737483749375037513752375337543755375637573758375937603761376237633764376537663767376837693770377137723773377437753776377737783779378037813782378337843785378637873788378937903791379237933794379537963797379837993800380138023803380438053806380738083809381038113812381338143815381638173818381938203821382238233824382538263827382838293830383138323833383438353836383738383839384038413842384338443845384638473848384938503851385238533854385538563857385838593860386138623863386438653866386738683869387038713872387338743875387638773878387938803881388238833884388538863887388838893890389138923893389438953896389738983899390039013902390339043905390639073908390939103911391239133914391539163917391839193920392139223923392439253926392739283929393039313932393339343935393639373938393939403941394239433944394539463947394839493950395139523953395439553956395739583959396039613962396339643965396639673968396939703971397239733974397539763977397839793980398139823983398439853986398739883989399039913992399339943995399639973998399940004001400240034004400540064007400840094010401140124013401440154016401740184019402040214022402340244025402640274028402940304031403240334034403540364037403840394040404140424043404440454046404740484049405040514052405340544055405640574058405940604061406240634064406540664067406840694070407140724073407440754076407740784079408040814082408340844085408640874088408940904091409240934094409540964097409840994100410141024103410441054106410741084109411041114112411341144115411641174118411941204121412241234124412541264127412841294130413141324133413441354136413741384139414041414142414341444145414641474148414941504151415241534154415541564157415841594160416141624163416441654166416741684169417041714172417341744175417641774178417941804181418241834184418541864187418841894190419141924193419441954196419741984199420042014202420342044205420642074208420942104211421242134214421542164217421842194220422142224223422442254226422742284229423042314232423342344235423642374238423942404241424242434244424542464247424842494250425142524253425442554256425742584259426042614262426342644265426642674268426942704271427242734274427542764277427842794280428142824283428442854286428742884289429042914292429342944295429642974298429943004301430243034304430543064307430843094310431143124313431443154316431743184319432043214322432343244325432643274328432943304331433243334334433543364337433843394340434143424343434443454346434743484349435043514352435343544355435643574358435943604361436243634364436543664367436843694370437143724373437443754376437743784379438043814382438343844385438643874388438943904391439243934394439543964397439843994400440144024403440444054406440744084409441044114412441344144415441644174418441944204421442244234424442544264427442844294430443144324433443444354436443744384439444044414442444344444445444644474448444944504451445244534454445544564457445844594460446144624463446444654466446744684469447044714472447344744475447644774478447944804481448244834484448544864487448844894490449144924493449444954496449744984499450045014502450345044505450645074508450945104511451245134514451545164517451845194520452145224523452445254526452745284529453045314532453345344535453645374538453945404541454245434544454545464547454845494550455145524553455445554556455745584559456045614562456345644565456645674568456945704571457245734574457545764577457845794580458145824583458445854586458745884589459045914592459345944595459645974598459946004601460246034604460546064607460846094610461146124613461446154616461746184619462046214622462346244625462646274628462946304631463246334634463546364637463846394640464146424643464446454646464746484649465046514652465346544655465646574658465946604661466246634664466546664667466846694670467146724673467446754676467746784679468046814682468346844685468646874688468946904691469246934694469546964697469846994700470147024703470447054706470747084709471047114712471347144715471647174718471947204721472247234724472547264727472847294730473147324733473447354736473747384739474047414742474347444745474647474748474947504751475247534754475547564757475847594760476147624763476447654766476747684769477047714772477347744775477647774778477947804781478247834784478547864787478847894790479147924793479447954796479747984799480048014802480348044805480648074808480948104811481248134814481548164817481848194820482148224823482448254826482748284829483048314832483348344835483648374838483948404841484248434844484548464847484848494850485148524853485448554856485748584859486048614862486348644865486648674868486948704871487248734874487548764877487848794880488148824883488448854886488748884889489048914892489348944895489648974898489949004901490249034904490549064907490849094910491149124913491449154916491749184919492049214922492349244925492649274928492949304931493249334934493549364937493849394940494149424943494449454946494749484949495049514952495349544955495649574958495949604961496249634964496549664967496849694970497149724973497449754976497749784979498049814982498349844985498649874988498949904991499249934994499549964997499849995000500150025003500450055006500750085009501050115012501350145015501650175018501950205021502250235024502550265027502850295030503150325033503450355036503750385039504050415042504350445045504650475048504950505051505250535054505550565057505850595060506150625063506450655066506750685069507050715072507350745075507650775078507950805081508250835084508550865087508850895090509150925093509450955096509750985099510051015102510351045105510651075108510951105111511251135114511551165117511851195120512151225123512451255126512751285129513051315132513351345135513651375138513951405141514251435144514551465147514851495150515151525153515451555156515751585159516051615162516351645165516651675168516951705171517251735174517551765177517851795180518151825183518451855186518751885189519051915192519351945195519651975198519952005201520252035204520552065207520852095210521152125213521452155216521752185219522052215222522352245225522652275228522952305231523252335234523552365237523852395240524152425243524452455246524752485249525052515252525352545255525652575258525952605261526252635264526552665267526852695270527152725273527452755276527752785279528052815282528352845285528652875288528952905291529252935294529552965297529852995300530153025303530453055306530753085309531053115312531353145315531653175318531953205321532253235324532553265327532853295330533153325333533453355336533753385339534053415342534353445345534653475348534953505351535253535354535553565357535853595360536153625363536453655366536753685369537053715372537353745375537653775378537953805381538253835384538553865387538853895390539153925393539453955396539753985399540054015402540354045405540654075408540954105411541254135414541554165417541854195420542154225423542454255426542754285429543054315432543354345435543654375438543954405441544254435444544554465447544854495450545154525453545454555456545754585459546054615462546354645465546654675468546954705471547254735474547554765477547854795480548154825483548454855486548754885489549054915492549354945495549654975498549955005501550255035504550555065507550855095510551155125513551455155516551755185519552055215522552355245525552655275528552955305531553255335534553555365537553855395540554155425543554455455546554755485549555055515552555355545555555655575558555955605561556255635564556555665567556855695570557155725573557455755576557755785579558055815582558355845585558655875588558955905591559255935594559555965597559855995600560156025603560456055606560756085609561056115612561356145615561656175618561956205621562256235624562556265627562856295630563156325633563456355636563756385639564056415642564356445645564656475648564956505651565256535654565556565657565856595660566156625663566456655666566756685669567056715672567356745675567656775678567956805681568256835684568556865687568856895690569156925693569456955696569756985699570057015702570357045705570657075708570957105711571257135714571557165717571857195720572157225723572457255726572757285729573057315732573357345735573657375738573957405741574257435744574557465747574857495750575157525753575457555756575757585759576057615762576357645765576657675768576957705771577257735774577557765777577857795780578157825783578457855786578757885789579057915792579357945795579657975798579958005801580258035804580558065807580858095810581158125813581458155816581758185819582058215822582358245825582658275828582958305831583258335834583558365837583858395840584158425843584458455846584758485849585058515852585358545855585658575858585958605861586258635864586558665867586858695870587158725873587458755876587758785879588058815882588358845885588658875888588958905891589258935894589558965897589858995900590159025903590459055906590759085909591059115912591359145915591659175918591959205921592259235924592559265927592859295930593159325933593459355936593759385939594059415942594359445945594659475948594959505951595259535954595559565957595859595960596159625963596459655966596759685969597059715972597359745975597659775978597959805981598259835984598559865987598859895990599159925993599459955996599759985999600060016002600360046005600660076008600960106011601260136014601560166017601860196020602160226023602460256026602760286029603060316032603360346035603660376038603960406041604260436044604560466047604860496050605160526053605460556056605760586059606060616062606360646065606660676068606960706071
  1. import datetime
  2. import os
  3. import re
  4. import unittest
  5. from urllib.parse import parse_qsl, urljoin, urlparse
  6. import pytz
  7. from django.contrib.admin import AdminSite, ModelAdmin
  8. from django.contrib.admin.helpers import ACTION_CHECKBOX_NAME
  9. from django.contrib.admin.models import ADDITION, DELETION, LogEntry
  10. from django.contrib.admin.options import TO_FIELD_VAR
  11. from django.contrib.admin.templatetags.admin_urls import add_preserved_filters
  12. from django.contrib.admin.tests import AdminSeleniumTestCase
  13. from django.contrib.admin.utils import quote
  14. from django.contrib.admin.views.main import IS_POPUP_VAR
  15. from django.contrib.auth import REDIRECT_FIELD_NAME, get_permission_codename
  16. from django.contrib.auth.models import Group, Permission, User
  17. from django.contrib.contenttypes.models import ContentType
  18. from django.core import mail
  19. from django.core.checks import Error
  20. from django.core.files import temp as tempfile
  21. from django.forms.utils import ErrorList
  22. from django.template.response import TemplateResponse
  23. from django.test import (
  24. TestCase, modify_settings, override_settings, skipUnlessDBFeature,
  25. )
  26. from django.test.utils import override_script_prefix
  27. from django.urls import NoReverseMatch, resolve, reverse
  28. from django.utils import formats, translation
  29. from django.utils.cache import get_max_age
  30. from django.utils.encoding import iri_to_uri
  31. from django.utils.html import escape
  32. from django.utils.http import urlencode
  33. from . import customadmin
  34. from .admin import CityAdmin, site, site2
  35. from .models import (
  36. Actor, AdminOrderedAdminMethod, AdminOrderedCallable, AdminOrderedField,
  37. AdminOrderedModelMethod, Answer, Answer2, Article, BarAccount, Book,
  38. Bookmark, Category, Chapter, ChapterXtra1, ChapterXtra2, Character, Child,
  39. Choice, City, Collector, Color, ComplexSortedPerson, CoverLetter,
  40. CustomArticle, CyclicOne, CyclicTwo, DooHickey, Employee, EmptyModel,
  41. Fabric, FancyDoodad, FieldOverridePost, FilteredManager, FooAccount,
  42. FoodDelivery, FunkyTag, Gallery, Grommet, Inquisition, Language, Link,
  43. MainPrepopulated, Media, ModelWithStringPrimaryKey, OtherStory, Paper,
  44. Parent, ParentWithDependentChildren, ParentWithUUIDPK, Person, Persona,
  45. Picture, Pizza, Plot, PlotDetails, PluggableSearchPerson, Podcast, Post,
  46. PrePopulatedPost, Promo, Question, ReadablePizza, ReadOnlyPizza,
  47. Recommendation, Recommender, RelatedPrepopulated, RelatedWithUUIDPKModel,
  48. Report, Restaurant, RowLevelChangePermissionModel, SecretHideout, Section,
  49. ShortMessage, Simple, State, Story, SuperSecretHideout, SuperVillain,
  50. Telegram, TitleTranslation, Topping, UnchangeableObject, UndeletableObject,
  51. UnorderedObject, Villain, Vodcast, Whatsit, Widget, Worker, WorkHour,
  52. )
  53. ERROR_MESSAGE = "Please enter the correct username and password \
  54. for a staff account. Note that both fields may be case-sensitive."
  55. MULTIPART_ENCTYPE = 'enctype="multipart/form-data"'
  56. class AdminFieldExtractionMixin:
  57. """
  58. Helper methods for extracting data from AdminForm.
  59. """
  60. def get_admin_form_fields(self, response):
  61. """
  62. Return a list of AdminFields for the AdminForm in the response.
  63. """
  64. admin_form = response.context['adminform']
  65. fieldsets = list(admin_form)
  66. field_lines = []
  67. for fieldset in fieldsets:
  68. field_lines += list(fieldset)
  69. fields = []
  70. for field_line in field_lines:
  71. fields += list(field_line)
  72. return fields
  73. def get_admin_readonly_fields(self, response):
  74. """
  75. Return the readonly fields for the response's AdminForm.
  76. """
  77. return [f for f in self.get_admin_form_fields(response) if f.is_readonly]
  78. def get_admin_readonly_field(self, response, field_name):
  79. """
  80. Return the readonly field for the given field_name.
  81. """
  82. admin_readonly_fields = self.get_admin_readonly_fields(response)
  83. for field in admin_readonly_fields:
  84. if field.field['name'] == field_name:
  85. return field
  86. @override_settings(ROOT_URLCONF='admin_views.urls', USE_I18N=True, USE_L10N=False, LANGUAGE_CODE='en')
  87. class AdminViewBasicTestCase(TestCase):
  88. @classmethod
  89. def setUpTestData(cls):
  90. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  91. cls.s1 = Section.objects.create(name='Test section')
  92. cls.a1 = Article.objects.create(
  93. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  94. )
  95. cls.a2 = Article.objects.create(
  96. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  97. )
  98. cls.a3 = Article.objects.create(
  99. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  100. )
  101. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  102. cls.color1 = Color.objects.create(value='Red', warm=True)
  103. cls.color2 = Color.objects.create(value='Orange', warm=True)
  104. cls.color3 = Color.objects.create(value='Blue', warm=False)
  105. cls.color4 = Color.objects.create(value='Green', warm=False)
  106. cls.fab1 = Fabric.objects.create(surface='x')
  107. cls.fab2 = Fabric.objects.create(surface='y')
  108. cls.fab3 = Fabric.objects.create(surface='plain')
  109. cls.b1 = Book.objects.create(name='Book 1')
  110. cls.b2 = Book.objects.create(name='Book 2')
  111. cls.pro1 = Promo.objects.create(name='Promo 1', book=cls.b1)
  112. cls.pro1 = Promo.objects.create(name='Promo 2', book=cls.b2)
  113. cls.chap1 = Chapter.objects.create(title='Chapter 1', content='[ insert contents here ]', book=cls.b1)
  114. cls.chap2 = Chapter.objects.create(title='Chapter 2', content='[ insert contents here ]', book=cls.b1)
  115. cls.chap3 = Chapter.objects.create(title='Chapter 1', content='[ insert contents here ]', book=cls.b2)
  116. cls.chap4 = Chapter.objects.create(title='Chapter 2', content='[ insert contents here ]', book=cls.b2)
  117. cls.cx1 = ChapterXtra1.objects.create(chap=cls.chap1, xtra='ChapterXtra1 1')
  118. cls.cx2 = ChapterXtra1.objects.create(chap=cls.chap3, xtra='ChapterXtra1 2')
  119. Actor.objects.create(name='Palin', age=27)
  120. # Post data for edit inline
  121. cls.inline_post_data = {
  122. "name": "Test section",
  123. # inline data
  124. "article_set-TOTAL_FORMS": "6",
  125. "article_set-INITIAL_FORMS": "3",
  126. "article_set-MAX_NUM_FORMS": "0",
  127. "article_set-0-id": cls.a1.pk,
  128. # there is no title in database, give one here or formset will fail.
  129. "article_set-0-title": "Norske bostaver æøå skaper problemer",
  130. "article_set-0-content": "&lt;p&gt;Middle content&lt;/p&gt;",
  131. "article_set-0-date_0": "2008-03-18",
  132. "article_set-0-date_1": "11:54:58",
  133. "article_set-0-section": cls.s1.pk,
  134. "article_set-1-id": cls.a2.pk,
  135. "article_set-1-title": "Need a title.",
  136. "article_set-1-content": "&lt;p&gt;Oldest content&lt;/p&gt;",
  137. "article_set-1-date_0": "2000-03-18",
  138. "article_set-1-date_1": "11:54:58",
  139. "article_set-2-id": cls.a3.pk,
  140. "article_set-2-title": "Need a title.",
  141. "article_set-2-content": "&lt;p&gt;Newest content&lt;/p&gt;",
  142. "article_set-2-date_0": "2009-03-18",
  143. "article_set-2-date_1": "11:54:58",
  144. "article_set-3-id": "",
  145. "article_set-3-title": "",
  146. "article_set-3-content": "",
  147. "article_set-3-date_0": "",
  148. "article_set-3-date_1": "",
  149. "article_set-4-id": "",
  150. "article_set-4-title": "",
  151. "article_set-4-content": "",
  152. "article_set-4-date_0": "",
  153. "article_set-4-date_1": "",
  154. "article_set-5-id": "",
  155. "article_set-5-title": "",
  156. "article_set-5-content": "",
  157. "article_set-5-date_0": "",
  158. "article_set-5-date_1": "",
  159. }
  160. def setUp(self):
  161. self.client.force_login(self.superuser)
  162. def assertContentBefore(self, response, text1, text2, failing_msg=None):
  163. """
  164. Testing utility asserting that text1 appears before text2 in response
  165. content.
  166. """
  167. self.assertEqual(response.status_code, 200)
  168. self.assertLess(
  169. response.content.index(text1.encode()),
  170. response.content.index(text2.encode()),
  171. (failing_msg or '') + '\nResponse:\n' + response.content.decode(response.charset)
  172. )
  173. class AdminViewBasicTest(AdminViewBasicTestCase):
  174. def test_trailing_slash_required(self):
  175. """
  176. If you leave off the trailing slash, app should redirect and add it.
  177. """
  178. add_url = reverse('admin:admin_views_article_add')
  179. response = self.client.get(add_url[:-1])
  180. self.assertRedirects(response, add_url, status_code=301)
  181. def test_basic_add_GET(self):
  182. """
  183. A smoke test to ensure GET on the add_view works.
  184. """
  185. response = self.client.get(reverse('admin:admin_views_section_add'))
  186. self.assertIsInstance(response, TemplateResponse)
  187. self.assertEqual(response.status_code, 200)
  188. def test_add_with_GET_args(self):
  189. response = self.client.get(reverse('admin:admin_views_section_add'), {'name': 'My Section'})
  190. self.assertContains(
  191. response, 'value="My Section"',
  192. msg_prefix="Couldn't find an input with the right value in the response"
  193. )
  194. def test_basic_edit_GET(self):
  195. """
  196. A smoke test to ensure GET on the change_view works.
  197. """
  198. response = self.client.get(reverse('admin:admin_views_section_change', args=(self.s1.pk,)))
  199. self.assertIsInstance(response, TemplateResponse)
  200. self.assertEqual(response.status_code, 200)
  201. def test_basic_edit_GET_string_PK(self):
  202. """
  203. GET on the change_view (when passing a string as the PK argument for a
  204. model with an integer PK field) redirects to the index page with a
  205. message saying the object doesn't exist.
  206. """
  207. response = self.client.get(reverse('admin:admin_views_section_change', args=(quote("abc/<b>"),)), follow=True)
  208. self.assertRedirects(response, reverse('admin:index'))
  209. self.assertEqual(
  210. [m.message for m in response.context['messages']],
  211. ["""section with ID "abc/<b>" doesn't exist. Perhaps it was deleted?"""]
  212. )
  213. def test_basic_edit_GET_old_url_redirect(self):
  214. """
  215. The change URL changed in Django 1.9, but the old one still redirects.
  216. """
  217. response = self.client.get(
  218. reverse('admin:admin_views_section_change', args=(self.s1.pk,)).replace('change/', '')
  219. )
  220. self.assertRedirects(response, reverse('admin:admin_views_section_change', args=(self.s1.pk,)))
  221. def test_basic_inheritance_GET_string_PK(self):
  222. """
  223. GET on the change_view (for inherited models) redirects to the index
  224. page with a message saying the object doesn't exist.
  225. """
  226. response = self.client.get(reverse('admin:admin_views_supervillain_change', args=('abc',)), follow=True)
  227. self.assertRedirects(response, reverse('admin:index'))
  228. self.assertEqual(
  229. [m.message for m in response.context['messages']],
  230. ["""super villain with ID "abc" doesn't exist. Perhaps it was deleted?"""]
  231. )
  232. def test_basic_add_POST(self):
  233. """
  234. A smoke test to ensure POST on add_view works.
  235. """
  236. post_data = {
  237. "name": "Another Section",
  238. # inline data
  239. "article_set-TOTAL_FORMS": "3",
  240. "article_set-INITIAL_FORMS": "0",
  241. "article_set-MAX_NUM_FORMS": "0",
  242. }
  243. response = self.client.post(reverse('admin:admin_views_section_add'), post_data)
  244. self.assertEqual(response.status_code, 302) # redirect somewhere
  245. def test_popup_add_POST(self):
  246. """
  247. Ensure http response from a popup is properly escaped.
  248. """
  249. post_data = {
  250. '_popup': '1',
  251. 'title': 'title with a new\nline',
  252. 'content': 'some content',
  253. 'date_0': '2010-09-10',
  254. 'date_1': '14:55:39',
  255. }
  256. response = self.client.post(reverse('admin:admin_views_article_add'), post_data)
  257. self.assertContains(response, 'title with a new\\nline')
  258. def test_basic_edit_POST(self):
  259. """
  260. A smoke test to ensure POST on edit_view works.
  261. """
  262. url = reverse('admin:admin_views_section_change', args=(self.s1.pk,))
  263. response = self.client.post(url, self.inline_post_data)
  264. self.assertEqual(response.status_code, 302) # redirect somewhere
  265. def test_edit_save_as(self):
  266. """
  267. Test "save as".
  268. """
  269. post_data = self.inline_post_data.copy()
  270. post_data.update({
  271. '_saveasnew': 'Save+as+new',
  272. "article_set-1-section": "1",
  273. "article_set-2-section": "1",
  274. "article_set-3-section": "1",
  275. "article_set-4-section": "1",
  276. "article_set-5-section": "1",
  277. })
  278. response = self.client.post(reverse('admin:admin_views_section_change', args=(self.s1.pk,)), post_data)
  279. self.assertEqual(response.status_code, 302) # redirect somewhere
  280. def test_edit_save_as_delete_inline(self):
  281. """
  282. Should be able to "Save as new" while also deleting an inline.
  283. """
  284. post_data = self.inline_post_data.copy()
  285. post_data.update({
  286. '_saveasnew': 'Save+as+new',
  287. "article_set-1-section": "1",
  288. "article_set-2-section": "1",
  289. "article_set-2-DELETE": "1",
  290. "article_set-3-section": "1",
  291. })
  292. response = self.client.post(reverse('admin:admin_views_section_change', args=(self.s1.pk,)), post_data)
  293. self.assertEqual(response.status_code, 302)
  294. # started with 3 articles, one was deleted.
  295. self.assertEqual(Section.objects.latest('id').article_set.count(), 2)
  296. def test_change_list_column_field_classes(self):
  297. response = self.client.get(reverse('admin:admin_views_article_changelist'))
  298. # callables display the callable name.
  299. self.assertContains(response, 'column-callable_year')
  300. self.assertContains(response, 'field-callable_year')
  301. # lambdas display as "lambda" + index that they appear in list_display.
  302. self.assertContains(response, 'column-lambda8')
  303. self.assertContains(response, 'field-lambda8')
  304. def test_change_list_sorting_callable(self):
  305. """
  306. Ensure we can sort on a list_display field that is a callable
  307. (column 2 is callable_year in ArticleAdmin)
  308. """
  309. response = self.client.get(reverse('admin:admin_views_article_changelist'), {'o': 2})
  310. self.assertContentBefore(
  311. response, 'Oldest content', 'Middle content',
  312. "Results of sorting on callable are out of order."
  313. )
  314. self.assertContentBefore(
  315. response, 'Middle content', 'Newest content',
  316. "Results of sorting on callable are out of order."
  317. )
  318. def test_change_list_sorting_callable_query_expression(self):
  319. """
  320. Query expressions may be used for admin_order_field. (column 9 is
  321. order_by_expression in ArticleAdmin).
  322. """
  323. response = self.client.get(reverse('admin:admin_views_article_changelist'), {'o': '9'})
  324. self.assertContentBefore(
  325. response, 'Oldest content', 'Middle content',
  326. 'Results of sorting on callable are out of order.'
  327. )
  328. self.assertContentBefore(
  329. response, 'Middle content', 'Newest content',
  330. 'Results of sorting on callable are out of order.'
  331. )
  332. def test_change_list_sorting_callable_query_expression_reverse(self):
  333. response = self.client.get(reverse('admin:admin_views_article_changelist'), {'o': '-9'})
  334. self.assertContentBefore(
  335. response, 'Middle content', 'Oldest content',
  336. 'Results of sorting on callable are out of order.'
  337. )
  338. self.assertContentBefore(
  339. response, 'Newest content', 'Middle content',
  340. 'Results of sorting on callable are out of order.'
  341. )
  342. def test_change_list_sorting_model(self):
  343. """
  344. Ensure we can sort on a list_display field that is a Model method
  345. (column 3 is 'model_year' in ArticleAdmin)
  346. """
  347. response = self.client.get(reverse('admin:admin_views_article_changelist'), {'o': '-3'})
  348. self.assertContentBefore(
  349. response, 'Newest content', 'Middle content',
  350. "Results of sorting on Model method are out of order."
  351. )
  352. self.assertContentBefore(
  353. response, 'Middle content', 'Oldest content',
  354. "Results of sorting on Model method are out of order."
  355. )
  356. def test_change_list_sorting_model_admin(self):
  357. """
  358. Ensure we can sort on a list_display field that is a ModelAdmin method
  359. (column 4 is 'modeladmin_year' in ArticleAdmin)
  360. """
  361. response = self.client.get(reverse('admin:admin_views_article_changelist'), {'o': '4'})
  362. self.assertContentBefore(
  363. response, 'Oldest content', 'Middle content',
  364. "Results of sorting on ModelAdmin method are out of order."
  365. )
  366. self.assertContentBefore(
  367. response, 'Middle content', 'Newest content',
  368. "Results of sorting on ModelAdmin method are out of order."
  369. )
  370. def test_change_list_sorting_model_admin_reverse(self):
  371. """
  372. Ensure we can sort on a list_display field that is a ModelAdmin
  373. method in reverse order (i.e. admin_order_field uses the '-' prefix)
  374. (column 6 is 'model_year_reverse' in ArticleAdmin)
  375. """
  376. response = self.client.get(reverse('admin:admin_views_article_changelist'), {'o': '6'})
  377. self.assertContentBefore(
  378. response, '2009', '2008',
  379. "Results of sorting on ModelAdmin method are out of order."
  380. )
  381. self.assertContentBefore(
  382. response, '2008', '2000',
  383. "Results of sorting on ModelAdmin method are out of order."
  384. )
  385. # Let's make sure the ordering is right and that we don't get a
  386. # FieldError when we change to descending order
  387. response = self.client.get(reverse('admin:admin_views_article_changelist'), {'o': '-6'})
  388. self.assertContentBefore(
  389. response, '2000', '2008',
  390. "Results of sorting on ModelAdmin method are out of order."
  391. )
  392. self.assertContentBefore(
  393. response, '2008', '2009',
  394. "Results of sorting on ModelAdmin method are out of order."
  395. )
  396. def test_change_list_sorting_multiple(self):
  397. p1 = Person.objects.create(name="Chris", gender=1, alive=True)
  398. p2 = Person.objects.create(name="Chris", gender=2, alive=True)
  399. p3 = Person.objects.create(name="Bob", gender=1, alive=True)
  400. link1 = reverse('admin:admin_views_person_change', args=(p1.pk,))
  401. link2 = reverse('admin:admin_views_person_change', args=(p2.pk,))
  402. link3 = reverse('admin:admin_views_person_change', args=(p3.pk,))
  403. # Sort by name, gender
  404. response = self.client.get(reverse('admin:admin_views_person_changelist'), {'o': '1.2'})
  405. self.assertContentBefore(response, link3, link1)
  406. self.assertContentBefore(response, link1, link2)
  407. # Sort by gender descending, name
  408. response = self.client.get(reverse('admin:admin_views_person_changelist'), {'o': '-2.1'})
  409. self.assertContentBefore(response, link2, link3)
  410. self.assertContentBefore(response, link3, link1)
  411. def test_change_list_sorting_preserve_queryset_ordering(self):
  412. """
  413. If no ordering is defined in `ModelAdmin.ordering` or in the query
  414. string, then the underlying order of the queryset should not be
  415. changed, even if it is defined in `Modeladmin.get_queryset()`.
  416. Refs #11868, #7309.
  417. """
  418. p1 = Person.objects.create(name="Amy", gender=1, alive=True, age=80)
  419. p2 = Person.objects.create(name="Bob", gender=1, alive=True, age=70)
  420. p3 = Person.objects.create(name="Chris", gender=2, alive=False, age=60)
  421. link1 = reverse('admin:admin_views_person_change', args=(p1.pk,))
  422. link2 = reverse('admin:admin_views_person_change', args=(p2.pk,))
  423. link3 = reverse('admin:admin_views_person_change', args=(p3.pk,))
  424. response = self.client.get(reverse('admin:admin_views_person_changelist'), {})
  425. self.assertContentBefore(response, link3, link2)
  426. self.assertContentBefore(response, link2, link1)
  427. def test_change_list_sorting_model_meta(self):
  428. # Test ordering on Model Meta is respected
  429. l1 = Language.objects.create(iso='ur', name='Urdu')
  430. l2 = Language.objects.create(iso='ar', name='Arabic')
  431. link1 = reverse('admin:admin_views_language_change', args=(quote(l1.pk),))
  432. link2 = reverse('admin:admin_views_language_change', args=(quote(l2.pk),))
  433. response = self.client.get(reverse('admin:admin_views_language_changelist'), {})
  434. self.assertContentBefore(response, link2, link1)
  435. # Test we can override with query string
  436. response = self.client.get(reverse('admin:admin_views_language_changelist'), {'o': '-1'})
  437. self.assertContentBefore(response, link1, link2)
  438. def test_change_list_sorting_override_model_admin(self):
  439. # Test ordering on Model Admin is respected, and overrides Model Meta
  440. dt = datetime.datetime.now()
  441. p1 = Podcast.objects.create(name="A", release_date=dt)
  442. p2 = Podcast.objects.create(name="B", release_date=dt - datetime.timedelta(10))
  443. link1 = reverse('admin:admin_views_podcast_change', args=(p1.pk,))
  444. link2 = reverse('admin:admin_views_podcast_change', args=(p2.pk,))
  445. response = self.client.get(reverse('admin:admin_views_podcast_changelist'), {})
  446. self.assertContentBefore(response, link1, link2)
  447. def test_multiple_sort_same_field(self):
  448. # The changelist displays the correct columns if two columns correspond
  449. # to the same ordering field.
  450. dt = datetime.datetime.now()
  451. p1 = Podcast.objects.create(name="A", release_date=dt)
  452. p2 = Podcast.objects.create(name="B", release_date=dt - datetime.timedelta(10))
  453. link1 = reverse('admin:admin_views_podcast_change', args=(quote(p1.pk),))
  454. link2 = reverse('admin:admin_views_podcast_change', args=(quote(p2.pk),))
  455. response = self.client.get(reverse('admin:admin_views_podcast_changelist'), {})
  456. self.assertContentBefore(response, link1, link2)
  457. p1 = ComplexSortedPerson.objects.create(name="Bob", age=10)
  458. p2 = ComplexSortedPerson.objects.create(name="Amy", age=20)
  459. link1 = reverse('admin:admin_views_complexsortedperson_change', args=(p1.pk,))
  460. link2 = reverse('admin:admin_views_complexsortedperson_change', args=(p2.pk,))
  461. response = self.client.get(reverse('admin:admin_views_complexsortedperson_changelist'), {})
  462. # Should have 5 columns (including action checkbox col)
  463. self.assertContains(response, '<th scope="col"', count=5)
  464. self.assertContains(response, 'Name')
  465. self.assertContains(response, 'Colored name')
  466. # Check order
  467. self.assertContentBefore(response, 'Name', 'Colored name')
  468. # Check sorting - should be by name
  469. self.assertContentBefore(response, link2, link1)
  470. def test_sort_indicators_admin_order(self):
  471. """
  472. The admin shows default sort indicators for all kinds of 'ordering'
  473. fields: field names, method on the model admin and model itself, and
  474. other callables. See #17252.
  475. """
  476. models = [(AdminOrderedField, 'adminorderedfield'),
  477. (AdminOrderedModelMethod, 'adminorderedmodelmethod'),
  478. (AdminOrderedAdminMethod, 'adminorderedadminmethod'),
  479. (AdminOrderedCallable, 'adminorderedcallable')]
  480. for model, url in models:
  481. model.objects.create(stuff='The Last Item', order=3)
  482. model.objects.create(stuff='The First Item', order=1)
  483. model.objects.create(stuff='The Middle Item', order=2)
  484. response = self.client.get(reverse('admin:admin_views_%s_changelist' % url), {})
  485. self.assertEqual(response.status_code, 200)
  486. # Should have 3 columns including action checkbox col.
  487. self.assertContains(response, '<th scope="col"', count=3, msg_prefix=url)
  488. # Check if the correct column was selected. 2 is the index of the
  489. # 'order' column in the model admin's 'list_display' with 0 being
  490. # the implicit 'action_checkbox' and 1 being the column 'stuff'.
  491. self.assertEqual(response.context['cl'].get_ordering_field_columns(), {2: 'asc'})
  492. # Check order of records.
  493. self.assertContentBefore(response, 'The First Item', 'The Middle Item')
  494. self.assertContentBefore(response, 'The Middle Item', 'The Last Item')
  495. def test_has_related_field_in_list_display_fk(self):
  496. """Joins shouldn't be performed for <FK>_id fields in list display."""
  497. state = State.objects.create(name='Karnataka')
  498. City.objects.create(state=state, name='Bangalore')
  499. response = self.client.get(reverse('admin:admin_views_city_changelist'), {})
  500. response.context['cl'].list_display = ['id', 'name', 'state']
  501. self.assertIs(response.context['cl'].has_related_field_in_list_display(), True)
  502. response.context['cl'].list_display = ['id', 'name', 'state_id']
  503. self.assertIs(response.context['cl'].has_related_field_in_list_display(), False)
  504. def test_has_related_field_in_list_display_o2o(self):
  505. """Joins shouldn't be performed for <O2O>_id fields in list display."""
  506. media = Media.objects.create(name='Foo')
  507. Vodcast.objects.create(media=media)
  508. response = self.client.get(reverse('admin:admin_views_vodcast_changelist'), {})
  509. response.context['cl'].list_display = ['media']
  510. self.assertIs(response.context['cl'].has_related_field_in_list_display(), True)
  511. response.context['cl'].list_display = ['media_id']
  512. self.assertIs(response.context['cl'].has_related_field_in_list_display(), False)
  513. def test_limited_filter(self):
  514. """Ensure admin changelist filters do not contain objects excluded via limit_choices_to.
  515. This also tests relation-spanning filters (e.g. 'color__value').
  516. """
  517. response = self.client.get(reverse('admin:admin_views_thing_changelist'))
  518. self.assertContains(
  519. response, '<div id="changelist-filter">',
  520. msg_prefix="Expected filter not found in changelist view"
  521. )
  522. self.assertNotContains(
  523. response, '<a href="?color__id__exact=3">Blue</a>',
  524. msg_prefix="Changelist filter not correctly limited by limit_choices_to"
  525. )
  526. def test_relation_spanning_filters(self):
  527. changelist_url = reverse('admin:admin_views_chapterxtra1_changelist')
  528. response = self.client.get(changelist_url)
  529. self.assertContains(response, '<div id="changelist-filter">')
  530. filters = {
  531. 'chap__id__exact': {
  532. 'values': [c.id for c in Chapter.objects.all()],
  533. 'test': lambda obj, value: obj.chap.id == value,
  534. },
  535. 'chap__title': {
  536. 'values': [c.title for c in Chapter.objects.all()],
  537. 'test': lambda obj, value: obj.chap.title == value,
  538. },
  539. 'chap__book__id__exact': {
  540. 'values': [b.id for b in Book.objects.all()],
  541. 'test': lambda obj, value: obj.chap.book.id == value,
  542. },
  543. 'chap__book__name': {
  544. 'values': [b.name for b in Book.objects.all()],
  545. 'test': lambda obj, value: obj.chap.book.name == value,
  546. },
  547. 'chap__book__promo__id__exact': {
  548. 'values': [p.id for p in Promo.objects.all()],
  549. 'test': lambda obj, value: obj.chap.book.promo_set.filter(id=value).exists(),
  550. },
  551. 'chap__book__promo__name': {
  552. 'values': [p.name for p in Promo.objects.all()],
  553. 'test': lambda obj, value: obj.chap.book.promo_set.filter(name=value).exists(),
  554. },
  555. # A forward relation (book) after a reverse relation (promo).
  556. 'guest_author__promo__book__id__exact': {
  557. 'values': [p.id for p in Book.objects.all()],
  558. 'test': lambda obj, value: obj.guest_author.promo_set.filter(book=value).exists(),
  559. },
  560. }
  561. for filter_path, params in filters.items():
  562. for value in params['values']:
  563. query_string = urlencode({filter_path: value})
  564. # ensure filter link exists
  565. self.assertContains(response, '<a href="?%s"' % query_string)
  566. # ensure link works
  567. filtered_response = self.client.get('%s?%s' % (changelist_url, query_string))
  568. self.assertEqual(filtered_response.status_code, 200)
  569. # ensure changelist contains only valid objects
  570. for obj in filtered_response.context['cl'].queryset.all():
  571. self.assertTrue(params['test'](obj, value))
  572. def test_incorrect_lookup_parameters(self):
  573. """Ensure incorrect lookup parameters are handled gracefully."""
  574. changelist_url = reverse('admin:admin_views_thing_changelist')
  575. response = self.client.get(changelist_url, {'notarealfield': '5'})
  576. self.assertRedirects(response, '%s?e=1' % changelist_url)
  577. # Spanning relationships through a nonexistent related object (Refs #16716)
  578. response = self.client.get(changelist_url, {'notarealfield__whatever': '5'})
  579. self.assertRedirects(response, '%s?e=1' % changelist_url)
  580. response = self.client.get(changelist_url, {'color__id__exact': 'StringNotInteger!'})
  581. self.assertRedirects(response, '%s?e=1' % changelist_url)
  582. # Regression test for #18530
  583. response = self.client.get(changelist_url, {'pub_date__gte': 'foo'})
  584. self.assertRedirects(response, '%s?e=1' % changelist_url)
  585. def test_isnull_lookups(self):
  586. """Ensure is_null is handled correctly."""
  587. Article.objects.create(title="I Could Go Anywhere", content="Versatile", date=datetime.datetime.now())
  588. changelist_url = reverse('admin:admin_views_article_changelist')
  589. response = self.client.get(changelist_url)
  590. self.assertContains(response, '4 articles')
  591. response = self.client.get(changelist_url, {'section__isnull': 'false'})
  592. self.assertContains(response, '3 articles')
  593. response = self.client.get(changelist_url, {'section__isnull': '0'})
  594. self.assertContains(response, '3 articles')
  595. response = self.client.get(changelist_url, {'section__isnull': 'true'})
  596. self.assertContains(response, '1 article')
  597. response = self.client.get(changelist_url, {'section__isnull': '1'})
  598. self.assertContains(response, '1 article')
  599. def test_logout_and_password_change_URLs(self):
  600. response = self.client.get(reverse('admin:admin_views_article_changelist'))
  601. self.assertContains(response, '<a href="%s">' % reverse('admin:logout'))
  602. self.assertContains(response, '<a href="%s">' % reverse('admin:password_change'))
  603. def test_named_group_field_choices_change_list(self):
  604. """
  605. Ensures the admin changelist shows correct values in the relevant column
  606. for rows corresponding to instances of a model in which a named group
  607. has been used in the choices option of a field.
  608. """
  609. link1 = reverse('admin:admin_views_fabric_change', args=(self.fab1.pk,))
  610. link2 = reverse('admin:admin_views_fabric_change', args=(self.fab2.pk,))
  611. response = self.client.get(reverse('admin:admin_views_fabric_changelist'))
  612. fail_msg = (
  613. "Changelist table isn't showing the right human-readable values "
  614. "set by a model field 'choices' option named group."
  615. )
  616. self.assertContains(response, '<a href="%s">Horizontal</a>' % link1, msg_prefix=fail_msg, html=True)
  617. self.assertContains(response, '<a href="%s">Vertical</a>' % link2, msg_prefix=fail_msg, html=True)
  618. def test_named_group_field_choices_filter(self):
  619. """
  620. Ensures the filter UI shows correctly when at least one named group has
  621. been used in the choices option of a model field.
  622. """
  623. response = self.client.get(reverse('admin:admin_views_fabric_changelist'))
  624. fail_msg = (
  625. "Changelist filter isn't showing options contained inside a model "
  626. "field 'choices' option named group."
  627. )
  628. self.assertContains(response, '<div id="changelist-filter">')
  629. self.assertContains(
  630. response, '<a href="?surface__exact=x" title="Horizontal">Horizontal</a>',
  631. msg_prefix=fail_msg, html=True
  632. )
  633. self.assertContains(
  634. response, '<a href="?surface__exact=y" title="Vertical">Vertical</a>',
  635. msg_prefix=fail_msg, html=True
  636. )
  637. def test_change_list_null_boolean_display(self):
  638. Post.objects.create(public=None)
  639. response = self.client.get(reverse('admin:admin_views_post_changelist'))
  640. self.assertContains(response, 'icon-unknown.svg')
  641. def test_i18n_language_non_english_default(self):
  642. """
  643. Check if the JavaScript i18n view returns an empty language catalog
  644. if the default language is non-English but the selected language
  645. is English. See #13388 and #3594 for more details.
  646. """
  647. with self.settings(LANGUAGE_CODE='fr'), translation.override('en-us'):
  648. response = self.client.get(reverse('admin:jsi18n'))
  649. self.assertNotContains(response, 'Choisir une heure')
  650. def test_i18n_language_non_english_fallback(self):
  651. """
  652. Makes sure that the fallback language is still working properly
  653. in cases where the selected language cannot be found.
  654. """
  655. with self.settings(LANGUAGE_CODE='fr'), translation.override('none'):
  656. response = self.client.get(reverse('admin:jsi18n'))
  657. self.assertContains(response, 'Choisir une heure')
  658. def test_jsi18n_with_context(self):
  659. response = self.client.get(reverse('admin-extra-context:jsi18n'))
  660. self.assertEqual(response.status_code, 200)
  661. def test_L10N_deactivated(self):
  662. """
  663. Check if L10N is deactivated, the JavaScript i18n view doesn't
  664. return localized date/time formats. Refs #14824.
  665. """
  666. with self.settings(LANGUAGE_CODE='ru', USE_L10N=False), translation.override('none'):
  667. response = self.client.get(reverse('admin:jsi18n'))
  668. self.assertNotContains(response, '%d.%m.%Y %H:%M:%S')
  669. self.assertContains(response, '%Y-%m-%d %H:%M:%S')
  670. def test_disallowed_filtering(self):
  671. with self.assertLogs('django.security.DisallowedModelAdminLookup', 'ERROR'):
  672. response = self.client.get(
  673. "%s?owner__email__startswith=fuzzy" % reverse('admin:admin_views_album_changelist')
  674. )
  675. self.assertEqual(response.status_code, 400)
  676. # Filters are allowed if explicitly included in list_filter
  677. response = self.client.get("%s?color__value__startswith=red" % reverse('admin:admin_views_thing_changelist'))
  678. self.assertEqual(response.status_code, 200)
  679. response = self.client.get("%s?color__value=red" % reverse('admin:admin_views_thing_changelist'))
  680. self.assertEqual(response.status_code, 200)
  681. # Filters should be allowed if they involve a local field without the
  682. # need to whitelist them in list_filter or date_hierarchy.
  683. response = self.client.get("%s?age__gt=30" % reverse('admin:admin_views_person_changelist'))
  684. self.assertEqual(response.status_code, 200)
  685. e1 = Employee.objects.create(name='Anonymous', gender=1, age=22, alive=True, code='123')
  686. e2 = Employee.objects.create(name='Visitor', gender=2, age=19, alive=True, code='124')
  687. WorkHour.objects.create(datum=datetime.datetime.now(), employee=e1)
  688. WorkHour.objects.create(datum=datetime.datetime.now(), employee=e2)
  689. response = self.client.get(reverse('admin:admin_views_workhour_changelist'))
  690. self.assertContains(response, 'employee__person_ptr__exact')
  691. response = self.client.get("%s?employee__person_ptr__exact=%d" % (
  692. reverse('admin:admin_views_workhour_changelist'), e1.pk)
  693. )
  694. self.assertEqual(response.status_code, 200)
  695. def test_disallowed_to_field(self):
  696. url = reverse('admin:admin_views_section_changelist')
  697. with self.assertLogs('django.security.DisallowedModelAdminToField', 'ERROR'):
  698. response = self.client.get(url, {TO_FIELD_VAR: 'missing_field'})
  699. self.assertEqual(response.status_code, 400)
  700. # Specifying a field that is not referred by any other model registered
  701. # to this admin site should raise an exception.
  702. with self.assertLogs('django.security.DisallowedModelAdminToField', 'ERROR'):
  703. response = self.client.get(reverse('admin:admin_views_section_changelist'), {TO_FIELD_VAR: 'name'})
  704. self.assertEqual(response.status_code, 400)
  705. # #23839 - Primary key should always be allowed, even if the referenced model isn't registered.
  706. response = self.client.get(reverse('admin:admin_views_notreferenced_changelist'), {TO_FIELD_VAR: 'id'})
  707. self.assertEqual(response.status_code, 200)
  708. # #23915 - Specifying a field referenced by another model though a m2m should be allowed.
  709. response = self.client.get(reverse('admin:admin_views_recipe_changelist'), {TO_FIELD_VAR: 'rname'})
  710. self.assertEqual(response.status_code, 200)
  711. # #23604, #23915 - Specifying a field referenced through a reverse m2m relationship should be allowed.
  712. response = self.client.get(reverse('admin:admin_views_ingredient_changelist'), {TO_FIELD_VAR: 'iname'})
  713. self.assertEqual(response.status_code, 200)
  714. # #23329 - Specifying a field that is not referred by any other model directly registered
  715. # to this admin site but registered through inheritance should be allowed.
  716. response = self.client.get(reverse('admin:admin_views_referencedbyparent_changelist'), {TO_FIELD_VAR: 'name'})
  717. self.assertEqual(response.status_code, 200)
  718. # #23431 - Specifying a field that is only referred to by a inline of a registered
  719. # model should be allowed.
  720. response = self.client.get(reverse('admin:admin_views_referencedbyinline_changelist'), {TO_FIELD_VAR: 'name'})
  721. self.assertEqual(response.status_code, 200)
  722. # #25622 - Specifying a field of a model only referred by a generic
  723. # relation should raise DisallowedModelAdminToField.
  724. url = reverse('admin:admin_views_referencedbygenrel_changelist')
  725. with self.assertLogs('django.security.DisallowedModelAdminToField', 'ERROR'):
  726. response = self.client.get(url, {TO_FIELD_VAR: 'object_id'})
  727. self.assertEqual(response.status_code, 400)
  728. # We also want to prevent the add, change, and delete views from
  729. # leaking a disallowed field value.
  730. with self.assertLogs('django.security.DisallowedModelAdminToField', 'ERROR'):
  731. response = self.client.post(reverse('admin:admin_views_section_add'), {TO_FIELD_VAR: 'name'})
  732. self.assertEqual(response.status_code, 400)
  733. section = Section.objects.create()
  734. url = reverse('admin:admin_views_section_change', args=(section.pk,))
  735. with self.assertLogs('django.security.DisallowedModelAdminToField', 'ERROR'):
  736. response = self.client.post(url, {TO_FIELD_VAR: 'name'})
  737. self.assertEqual(response.status_code, 400)
  738. url = reverse('admin:admin_views_section_delete', args=(section.pk,))
  739. with self.assertLogs('django.security.DisallowedModelAdminToField', 'ERROR'):
  740. response = self.client.post(url, {TO_FIELD_VAR: 'name'})
  741. self.assertEqual(response.status_code, 400)
  742. def test_allowed_filtering_15103(self):
  743. """
  744. Regressions test for ticket 15103 - filtering on fields defined in a
  745. ForeignKey 'limit_choices_to' should be allowed, otherwise raw_id_fields
  746. can break.
  747. """
  748. # Filters should be allowed if they are defined on a ForeignKey pointing to this model
  749. url = "%s?leader__name=Palin&leader__age=27" % reverse('admin:admin_views_inquisition_changelist')
  750. response = self.client.get(url)
  751. self.assertEqual(response.status_code, 200)
  752. def test_popup_dismiss_related(self):
  753. """
  754. Regression test for ticket 20664 - ensure the pk is properly quoted.
  755. """
  756. actor = Actor.objects.create(name="Palin", age=27)
  757. response = self.client.get("%s?%s" % (reverse('admin:admin_views_actor_changelist'), IS_POPUP_VAR))
  758. self.assertContains(response, 'data-popup-opener="%s"' % actor.pk)
  759. def test_hide_change_password(self):
  760. """
  761. Tests if the "change password" link in the admin is hidden if the User
  762. does not have a usable password set.
  763. (against 9bea85795705d015cdadc82c68b99196a8554f5c)
  764. """
  765. user = User.objects.get(username='super')
  766. user.set_unusable_password()
  767. user.save()
  768. self.client.force_login(user)
  769. response = self.client.get(reverse('admin:index'))
  770. self.assertNotContains(
  771. response, reverse('admin:password_change'),
  772. msg_prefix='The "change password" link should not be displayed if a user does not have a usable password.'
  773. )
  774. def test_change_view_with_show_delete_extra_context(self):
  775. """
  776. The 'show_delete' context variable in the admin's change view controls
  777. the display of the delete button.
  778. """
  779. instance = UndeletableObject.objects.create(name='foo')
  780. response = self.client.get(reverse('admin:admin_views_undeletableobject_change', args=(instance.pk,)))
  781. self.assertNotContains(response, 'deletelink')
  782. def test_change_view_logs_m2m_field_changes(self):
  783. """Changes to ManyToManyFields are included in the object's history."""
  784. pizza = ReadablePizza.objects.create(name='Cheese')
  785. cheese = Topping.objects.create(name='cheese')
  786. post_data = {'name': pizza.name, 'toppings': [cheese.pk]}
  787. response = self.client.post(reverse('admin:admin_views_readablepizza_change', args=(pizza.pk,)), post_data)
  788. self.assertRedirects(response, reverse('admin:admin_views_readablepizza_changelist'))
  789. pizza_ctype = ContentType.objects.get_for_model(ReadablePizza, for_concrete_model=False)
  790. log = LogEntry.objects.filter(content_type=pizza_ctype, object_id=pizza.pk).first()
  791. self.assertEqual(log.get_change_message(), 'Changed toppings.')
  792. def test_allows_attributeerror_to_bubble_up(self):
  793. """
  794. AttributeErrors are allowed to bubble when raised inside a change list
  795. view. Requires a model to be created so there's something to display.
  796. Refs: #16655, #18593, and #18747
  797. """
  798. Simple.objects.create()
  799. with self.assertRaises(AttributeError):
  800. self.client.get(reverse('admin:admin_views_simple_changelist'))
  801. def test_changelist_with_no_change_url(self):
  802. """
  803. ModelAdmin.changelist_view shouldn't result in a NoReverseMatch if url
  804. for change_view is removed from get_urls (#20934).
  805. """
  806. o = UnchangeableObject.objects.create()
  807. response = self.client.get(reverse('admin:admin_views_unchangeableobject_changelist'))
  808. self.assertEqual(response.status_code, 200)
  809. # Check the format of the shown object -- shouldn't contain a change link
  810. self.assertContains(response, '<th class="field-__str__">%s</th>' % o, html=True)
  811. def test_invalid_appindex_url(self):
  812. """
  813. #21056 -- URL reversing shouldn't work for nonexistent apps.
  814. """
  815. good_url = '/test_admin/admin/admin_views/'
  816. confirm_good_url = reverse('admin:app_list',
  817. kwargs={'app_label': 'admin_views'})
  818. self.assertEqual(good_url, confirm_good_url)
  819. with self.assertRaises(NoReverseMatch):
  820. reverse('admin:app_list', kwargs={'app_label': 'this_should_fail'})
  821. with self.assertRaises(NoReverseMatch):
  822. reverse('admin:app_list', args=('admin_views2',))
  823. def test_resolve_admin_views(self):
  824. index_match = resolve('/test_admin/admin4/')
  825. list_match = resolve('/test_admin/admin4/auth/user/')
  826. self.assertIs(index_match.func.admin_site, customadmin.simple_site)
  827. self.assertIsInstance(list_match.func.model_admin, customadmin.CustomPwdTemplateUserAdmin)
  828. def test_adminsite_display_site_url(self):
  829. """
  830. #13749 - Admin should display link to front-end site 'View site'
  831. """
  832. url = reverse('admin:index')
  833. response = self.client.get(url)
  834. self.assertEqual(response.context['site_url'], '/my-site-url/')
  835. self.assertContains(response, '<a href="/my-site-url/">View site</a>')
  836. @override_settings(TIME_ZONE='America/Sao_Paulo', USE_TZ=True)
  837. def test_date_hierarchy_timezone_dst(self):
  838. # This datetime doesn't exist in this timezone due to DST.
  839. date = pytz.timezone('America/Sao_Paulo').localize(datetime.datetime(2016, 10, 16, 15), is_dst=None)
  840. q = Question.objects.create(question='Why?', expires=date)
  841. Answer2.objects.create(question=q, answer='Because.')
  842. response = self.client.get(reverse('admin:admin_views_answer2_changelist'))
  843. self.assertEqual(response.status_code, 200)
  844. self.assertContains(response, 'question__expires__day=16')
  845. self.assertContains(response, 'question__expires__month=10')
  846. self.assertContains(response, 'question__expires__year=2016')
  847. def test_sortable_by_columns_subset(self):
  848. expected_sortable_fields = ('date', 'callable_year')
  849. expected_not_sortable_fields = (
  850. 'content', 'model_year', 'modeladmin_year', 'model_year_reversed',
  851. 'section',
  852. )
  853. response = self.client.get(reverse('admin6:admin_views_article_changelist'))
  854. for field_name in expected_sortable_fields:
  855. self.assertContains(response, '<th scope="col" class="sortable column-%s">' % field_name)
  856. for field_name in expected_not_sortable_fields:
  857. self.assertContains(response, '<th scope="col" class="column-%s">' % field_name)
  858. def test_get_sortable_by_columns_subset(self):
  859. response = self.client.get(reverse('admin6:admin_views_actor_changelist'))
  860. self.assertContains(response, '<th scope="col" class="sortable column-age">')
  861. self.assertContains(response, '<th scope="col" class="column-name">')
  862. def test_sortable_by_no_column(self):
  863. expected_not_sortable_fields = ('title', 'book')
  864. response = self.client.get(reverse('admin6:admin_views_chapter_changelist'))
  865. for field_name in expected_not_sortable_fields:
  866. self.assertContains(response, '<th scope="col" class="column-%s">' % field_name)
  867. self.assertNotContains(response, '<th scope="col" class="sortable column')
  868. def test_get_sortable_by_no_column(self):
  869. response = self.client.get(reverse('admin6:admin_views_color_changelist'))
  870. self.assertContains(response, '<th scope="col" class="column-value">')
  871. self.assertNotContains(response, '<th scope="col" class="sortable column')
  872. @override_settings(TEMPLATES=[{
  873. 'BACKEND': 'django.template.backends.django.DjangoTemplates',
  874. # Put this app's and the shared tests templates dirs in DIRS to take precedence
  875. # over the admin's templates dir.
  876. 'DIRS': [
  877. os.path.join(os.path.dirname(__file__), 'templates'),
  878. os.path.join(os.path.dirname(os.path.dirname(__file__)), 'templates'),
  879. ],
  880. 'APP_DIRS': True,
  881. 'OPTIONS': {
  882. 'context_processors': [
  883. 'django.template.context_processors.debug',
  884. 'django.template.context_processors.request',
  885. 'django.contrib.auth.context_processors.auth',
  886. 'django.contrib.messages.context_processors.messages',
  887. ],
  888. },
  889. }])
  890. class AdminCustomTemplateTests(AdminViewBasicTestCase):
  891. def test_custom_model_admin_templates(self):
  892. # Test custom change list template with custom extra context
  893. response = self.client.get(reverse('admin:admin_views_customarticle_changelist'))
  894. self.assertContains(response, "var hello = 'Hello!';")
  895. self.assertTemplateUsed(response, 'custom_admin/change_list.html')
  896. # Test custom add form template
  897. response = self.client.get(reverse('admin:admin_views_customarticle_add'))
  898. self.assertTemplateUsed(response, 'custom_admin/add_form.html')
  899. # Add an article so we can test delete, change, and history views
  900. post = self.client.post(reverse('admin:admin_views_customarticle_add'), {
  901. 'content': '<p>great article</p>',
  902. 'date_0': '2008-03-18',
  903. 'date_1': '10:54:39'
  904. })
  905. self.assertRedirects(post, reverse('admin:admin_views_customarticle_changelist'))
  906. self.assertEqual(CustomArticle.objects.all().count(), 1)
  907. article_pk = CustomArticle.objects.all()[0].pk
  908. # Test custom delete, change, and object history templates
  909. # Test custom change form template
  910. response = self.client.get(reverse('admin:admin_views_customarticle_change', args=(article_pk,)))
  911. self.assertTemplateUsed(response, 'custom_admin/change_form.html')
  912. response = self.client.get(reverse('admin:admin_views_customarticle_delete', args=(article_pk,)))
  913. self.assertTemplateUsed(response, 'custom_admin/delete_confirmation.html')
  914. response = self.client.post(reverse('admin:admin_views_customarticle_changelist'), data={
  915. 'index': 0,
  916. 'action': ['delete_selected'],
  917. '_selected_action': ['1'],
  918. })
  919. self.assertTemplateUsed(response, 'custom_admin/delete_selected_confirmation.html')
  920. response = self.client.get(reverse('admin:admin_views_customarticle_history', args=(article_pk,)))
  921. self.assertTemplateUsed(response, 'custom_admin/object_history.html')
  922. # A custom popup response template may be specified by
  923. # ModelAdmin.popup_response_template.
  924. response = self.client.post(reverse('admin:admin_views_customarticle_add') + '?%s=1' % IS_POPUP_VAR, {
  925. 'content': '<p>great article</p>',
  926. 'date_0': '2008-03-18',
  927. 'date_1': '10:54:39',
  928. IS_POPUP_VAR: '1'
  929. })
  930. self.assertEqual(response.template_name, 'custom_admin/popup_response.html')
  931. def test_extended_bodyclass_template_change_form(self):
  932. """
  933. The admin/change_form.html template uses block.super in the
  934. bodyclass block.
  935. """
  936. response = self.client.get(reverse('admin:admin_views_section_add'))
  937. self.assertContains(response, 'bodyclass_consistency_check ')
  938. def test_change_password_template(self):
  939. user = User.objects.get(username='super')
  940. response = self.client.get(reverse('admin:auth_user_password_change', args=(user.id,)))
  941. # The auth/user/change_password.html template uses super in the
  942. # bodyclass block.
  943. self.assertContains(response, 'bodyclass_consistency_check ')
  944. # When a site has multiple passwords in the browser's password manager,
  945. # a browser pop up asks which user the new password is for. To prevent
  946. # this, the username is added to the change password form.
  947. self.assertContains(response, '<input type="text" name="username" value="super" style="display: none">')
  948. def test_extended_bodyclass_template_index(self):
  949. """
  950. The admin/index.html template uses block.super in the bodyclass block.
  951. """
  952. response = self.client.get(reverse('admin:index'))
  953. self.assertContains(response, 'bodyclass_consistency_check ')
  954. def test_extended_bodyclass_change_list(self):
  955. """
  956. The admin/change_list.html' template uses block.super
  957. in the bodyclass block.
  958. """
  959. response = self.client.get(reverse('admin:admin_views_article_changelist'))
  960. self.assertContains(response, 'bodyclass_consistency_check ')
  961. def test_extended_bodyclass_template_login(self):
  962. """
  963. The admin/login.html template uses block.super in the
  964. bodyclass block.
  965. """
  966. self.client.logout()
  967. response = self.client.get(reverse('admin:login'))
  968. self.assertContains(response, 'bodyclass_consistency_check ')
  969. def test_extended_bodyclass_template_delete_confirmation(self):
  970. """
  971. The admin/delete_confirmation.html template uses
  972. block.super in the bodyclass block.
  973. """
  974. group = Group.objects.create(name="foogroup")
  975. response = self.client.get(reverse('admin:auth_group_delete', args=(group.id,)))
  976. self.assertContains(response, 'bodyclass_consistency_check ')
  977. def test_extended_bodyclass_template_delete_selected_confirmation(self):
  978. """
  979. The admin/delete_selected_confirmation.html template uses
  980. block.super in bodyclass block.
  981. """
  982. group = Group.objects.create(name="foogroup")
  983. post_data = {
  984. 'action': 'delete_selected',
  985. 'selected_across': '0',
  986. 'index': '0',
  987. '_selected_action': group.id
  988. }
  989. response = self.client.post(reverse('admin:auth_group_changelist'), post_data)
  990. self.assertEqual(response.context['site_header'], 'Django administration')
  991. self.assertContains(response, 'bodyclass_consistency_check ')
  992. def test_filter_with_custom_template(self):
  993. """
  994. A custom template can be used to render an admin filter.
  995. """
  996. response = self.client.get(reverse('admin:admin_views_color2_changelist'))
  997. self.assertTemplateUsed(response, 'custom_filter_template.html')
  998. @override_settings(ROOT_URLCONF='admin_views.urls')
  999. class AdminViewFormUrlTest(TestCase):
  1000. current_app = "admin3"
  1001. @classmethod
  1002. def setUpTestData(cls):
  1003. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  1004. cls.s1 = Section.objects.create(name='Test section')
  1005. cls.a1 = Article.objects.create(
  1006. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  1007. )
  1008. cls.a2 = Article.objects.create(
  1009. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  1010. )
  1011. cls.a3 = Article.objects.create(
  1012. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  1013. )
  1014. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  1015. def setUp(self):
  1016. self.client.force_login(self.superuser)
  1017. def test_change_form_URL_has_correct_value(self):
  1018. """
  1019. change_view has form_url in response.context
  1020. """
  1021. response = self.client.get(
  1022. reverse('admin:admin_views_section_change', args=(self.s1.pk,), current_app=self.current_app)
  1023. )
  1024. self.assertIn('form_url', response.context, msg='form_url not present in response.context')
  1025. self.assertEqual(response.context['form_url'], 'pony')
  1026. def test_initial_data_can_be_overridden(self):
  1027. """
  1028. The behavior for setting initial form data can be overridden in the
  1029. ModelAdmin class. Usually, the initial value is set via the GET params.
  1030. """
  1031. response = self.client.get(
  1032. reverse('admin:admin_views_restaurant_add', current_app=self.current_app),
  1033. {'name': 'test_value'}
  1034. )
  1035. # this would be the usual behaviour
  1036. self.assertNotContains(response, 'value="test_value"')
  1037. # this is the overridden behaviour
  1038. self.assertContains(response, 'value="overridden_value"')
  1039. @override_settings(ROOT_URLCONF='admin_views.urls')
  1040. class AdminJavaScriptTest(TestCase):
  1041. @classmethod
  1042. def setUpTestData(cls):
  1043. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  1044. def setUp(self):
  1045. self.client.force_login(self.superuser)
  1046. def test_js_minified_only_if_debug_is_false(self):
  1047. """
  1048. The minified versions of the JS files are only used when DEBUG is False.
  1049. """
  1050. with override_settings(DEBUG=False):
  1051. response = self.client.get(reverse('admin:admin_views_section_add'))
  1052. self.assertNotContains(response, 'vendor/jquery/jquery.js')
  1053. self.assertContains(response, 'vendor/jquery/jquery.min.js')
  1054. self.assertNotContains(response, 'prepopulate.js')
  1055. self.assertContains(response, 'prepopulate.min.js')
  1056. self.assertNotContains(response, 'actions.js')
  1057. self.assertContains(response, 'actions.min.js')
  1058. self.assertNotContains(response, 'collapse.js')
  1059. self.assertContains(response, 'collapse.min.js')
  1060. self.assertNotContains(response, 'inlines.js')
  1061. self.assertContains(response, 'inlines.min.js')
  1062. with override_settings(DEBUG=True):
  1063. response = self.client.get(reverse('admin:admin_views_section_add'))
  1064. self.assertContains(response, 'vendor/jquery/jquery.js')
  1065. self.assertNotContains(response, 'vendor/jquery/jquery.min.js')
  1066. self.assertContains(response, 'prepopulate.js')
  1067. self.assertNotContains(response, 'prepopulate.min.js')
  1068. self.assertContains(response, 'actions.js')
  1069. self.assertNotContains(response, 'actions.min.js')
  1070. self.assertContains(response, 'collapse.js')
  1071. self.assertNotContains(response, 'collapse.min.js')
  1072. self.assertContains(response, 'inlines.js')
  1073. self.assertNotContains(response, 'inlines.min.js')
  1074. @override_settings(ROOT_URLCONF='admin_views.urls')
  1075. class SaveAsTests(TestCase):
  1076. @classmethod
  1077. def setUpTestData(cls):
  1078. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  1079. cls.per1 = Person.objects.create(name='John Mauchly', gender=1, alive=True)
  1080. def setUp(self):
  1081. self.client.force_login(self.superuser)
  1082. def test_save_as_duplication(self):
  1083. """'save as' creates a new person"""
  1084. post_data = {'_saveasnew': '', 'name': 'John M', 'gender': 1, 'age': 42}
  1085. response = self.client.post(reverse('admin:admin_views_person_change', args=(self.per1.pk,)), post_data)
  1086. self.assertEqual(len(Person.objects.filter(name='John M')), 1)
  1087. self.assertEqual(len(Person.objects.filter(id=self.per1.pk)), 1)
  1088. new_person = Person.objects.latest('id')
  1089. self.assertRedirects(response, reverse('admin:admin_views_person_change', args=(new_person.pk,)))
  1090. def test_save_as_continue_false(self):
  1091. """
  1092. Saving a new object using "Save as new" redirects to the changelist
  1093. instead of the change view when ModelAdmin.save_as_continue=False.
  1094. """
  1095. post_data = {'_saveasnew': '', 'name': 'John M', 'gender': 1, 'age': 42}
  1096. url = reverse('admin:admin_views_person_change', args=(self.per1.pk,), current_app=site2.name)
  1097. response = self.client.post(url, post_data)
  1098. self.assertEqual(len(Person.objects.filter(name='John M')), 1)
  1099. self.assertEqual(len(Person.objects.filter(id=self.per1.pk)), 1)
  1100. self.assertRedirects(response, reverse('admin:admin_views_person_changelist', current_app=site2.name))
  1101. def test_save_as_new_with_validation_errors(self):
  1102. """
  1103. When you click "Save as new" and have a validation error,
  1104. you only see the "Save as new" button and not the other save buttons,
  1105. and that only the "Save as" button is visible.
  1106. """
  1107. response = self.client.post(reverse('admin:admin_views_person_change', args=(self.per1.pk,)), {
  1108. '_saveasnew': '',
  1109. 'gender': 'invalid',
  1110. '_addanother': 'fail',
  1111. })
  1112. self.assertContains(response, 'Please correct the errors below.')
  1113. self.assertFalse(response.context['show_save_and_add_another'])
  1114. self.assertFalse(response.context['show_save_and_continue'])
  1115. self.assertTrue(response.context['show_save_as_new'])
  1116. def test_save_as_new_with_validation_errors_with_inlines(self):
  1117. parent = Parent.objects.create(name='Father')
  1118. child = Child.objects.create(parent=parent, name='Child')
  1119. response = self.client.post(reverse('admin:admin_views_parent_change', args=(parent.pk,)), {
  1120. '_saveasnew': 'Save as new',
  1121. 'child_set-0-parent': parent.pk,
  1122. 'child_set-0-id': child.pk,
  1123. 'child_set-0-name': 'Child',
  1124. 'child_set-INITIAL_FORMS': 1,
  1125. 'child_set-MAX_NUM_FORMS': 1000,
  1126. 'child_set-MIN_NUM_FORMS': 0,
  1127. 'child_set-TOTAL_FORMS': 4,
  1128. 'name': '_invalid',
  1129. })
  1130. self.assertContains(response, 'Please correct the error below.')
  1131. self.assertFalse(response.context['show_save_and_add_another'])
  1132. self.assertFalse(response.context['show_save_and_continue'])
  1133. self.assertTrue(response.context['show_save_as_new'])
  1134. def test_save_as_new_with_inlines_with_validation_errors(self):
  1135. parent = Parent.objects.create(name='Father')
  1136. child = Child.objects.create(parent=parent, name='Child')
  1137. response = self.client.post(reverse('admin:admin_views_parent_change', args=(parent.pk,)), {
  1138. '_saveasnew': 'Save as new',
  1139. 'child_set-0-parent': parent.pk,
  1140. 'child_set-0-id': child.pk,
  1141. 'child_set-0-name': '_invalid',
  1142. 'child_set-INITIAL_FORMS': 1,
  1143. 'child_set-MAX_NUM_FORMS': 1000,
  1144. 'child_set-MIN_NUM_FORMS': 0,
  1145. 'child_set-TOTAL_FORMS': 4,
  1146. 'name': 'Father',
  1147. })
  1148. self.assertContains(response, 'Please correct the error below.')
  1149. self.assertFalse(response.context['show_save_and_add_another'])
  1150. self.assertFalse(response.context['show_save_and_continue'])
  1151. self.assertTrue(response.context['show_save_as_new'])
  1152. @override_settings(ROOT_URLCONF='admin_views.urls')
  1153. class CustomModelAdminTest(AdminViewBasicTestCase):
  1154. def test_custom_admin_site_login_form(self):
  1155. self.client.logout()
  1156. response = self.client.get(reverse('admin2:index'), follow=True)
  1157. self.assertIsInstance(response, TemplateResponse)
  1158. self.assertEqual(response.status_code, 200)
  1159. login = self.client.post(reverse('admin2:login'), {
  1160. REDIRECT_FIELD_NAME: reverse('admin2:index'),
  1161. 'username': 'customform',
  1162. 'password': 'secret',
  1163. }, follow=True)
  1164. self.assertIsInstance(login, TemplateResponse)
  1165. self.assertEqual(login.status_code, 200)
  1166. self.assertContains(login, 'custom form error')
  1167. self.assertContains(login, 'path/to/media.css')
  1168. def test_custom_admin_site_login_template(self):
  1169. self.client.logout()
  1170. response = self.client.get(reverse('admin2:index'), follow=True)
  1171. self.assertIsInstance(response, TemplateResponse)
  1172. self.assertTemplateUsed(response, 'custom_admin/login.html')
  1173. self.assertContains(response, 'Hello from a custom login template')
  1174. def test_custom_admin_site_logout_template(self):
  1175. response = self.client.get(reverse('admin2:logout'))
  1176. self.assertIsInstance(response, TemplateResponse)
  1177. self.assertTemplateUsed(response, 'custom_admin/logout.html')
  1178. self.assertContains(response, 'Hello from a custom logout template')
  1179. def test_custom_admin_site_index_view_and_template(self):
  1180. response = self.client.get(reverse('admin2:index'))
  1181. self.assertIsInstance(response, TemplateResponse)
  1182. self.assertTemplateUsed(response, 'custom_admin/index.html')
  1183. self.assertContains(response, 'Hello from a custom index template *bar*')
  1184. def test_custom_admin_site_app_index_view_and_template(self):
  1185. response = self.client.get(reverse('admin2:app_list', args=('admin_views',)))
  1186. self.assertIsInstance(response, TemplateResponse)
  1187. self.assertTemplateUsed(response, 'custom_admin/app_index.html')
  1188. self.assertContains(response, 'Hello from a custom app_index template')
  1189. def test_custom_admin_site_password_change_template(self):
  1190. response = self.client.get(reverse('admin2:password_change'))
  1191. self.assertIsInstance(response, TemplateResponse)
  1192. self.assertTemplateUsed(response, 'custom_admin/password_change_form.html')
  1193. self.assertContains(response, 'Hello from a custom password change form template')
  1194. def test_custom_admin_site_password_change_with_extra_context(self):
  1195. response = self.client.get(reverse('admin2:password_change'))
  1196. self.assertIsInstance(response, TemplateResponse)
  1197. self.assertTemplateUsed(response, 'custom_admin/password_change_form.html')
  1198. self.assertContains(response, 'eggs')
  1199. def test_custom_admin_site_password_change_done_template(self):
  1200. response = self.client.get(reverse('admin2:password_change_done'))
  1201. self.assertIsInstance(response, TemplateResponse)
  1202. self.assertTemplateUsed(response, 'custom_admin/password_change_done.html')
  1203. self.assertContains(response, 'Hello from a custom password change done template')
  1204. def test_custom_admin_site_view(self):
  1205. self.client.force_login(self.superuser)
  1206. response = self.client.get(reverse('admin2:my_view'))
  1207. self.assertEqual(response.content, b"Django is a magical pony!")
  1208. def test_pwd_change_custom_template(self):
  1209. self.client.force_login(self.superuser)
  1210. su = User.objects.get(username='super')
  1211. response = self.client.get(reverse('admin4:auth_user_password_change', args=(su.pk,)))
  1212. self.assertEqual(response.status_code, 200)
  1213. def get_perm(Model, perm):
  1214. """Return the permission object, for the Model"""
  1215. ct = ContentType.objects.get_for_model(Model)
  1216. return Permission.objects.get(content_type=ct, codename=perm)
  1217. @override_settings(
  1218. ROOT_URLCONF='admin_views.urls',
  1219. # Test with the admin's documented list of required context processors.
  1220. TEMPLATES=[{
  1221. 'BACKEND': 'django.template.backends.django.DjangoTemplates',
  1222. 'APP_DIRS': True,
  1223. 'OPTIONS': {
  1224. 'context_processors': [
  1225. 'django.contrib.auth.context_processors.auth',
  1226. 'django.contrib.messages.context_processors.messages',
  1227. ],
  1228. },
  1229. }],
  1230. )
  1231. class AdminViewPermissionsTest(TestCase):
  1232. """Tests for Admin Views Permissions."""
  1233. @classmethod
  1234. def setUpTestData(cls):
  1235. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  1236. cls.viewuser = User.objects.create_user(username='viewuser', password='secret', is_staff=True)
  1237. cls.adduser = User.objects.create_user(username='adduser', password='secret', is_staff=True)
  1238. cls.changeuser = User.objects.create_user(username='changeuser', password='secret', is_staff=True)
  1239. cls.deleteuser = User.objects.create_user(username='deleteuser', password='secret', is_staff=True)
  1240. cls.joepublicuser = User.objects.create_user(username='joepublic', password='secret')
  1241. cls.nostaffuser = User.objects.create_user(username='nostaff', password='secret')
  1242. cls.s1 = Section.objects.create(name='Test section')
  1243. cls.a1 = Article.objects.create(
  1244. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1,
  1245. another_section=cls.s1,
  1246. )
  1247. cls.a2 = Article.objects.create(
  1248. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  1249. )
  1250. cls.a3 = Article.objects.create(
  1251. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  1252. )
  1253. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  1254. # Setup permissions, for our users who can add, change, and delete.
  1255. opts = Article._meta
  1256. # User who can view Articles
  1257. cls.viewuser.user_permissions.add(get_perm(Article, get_permission_codename('view', opts)))
  1258. # User who can add Articles
  1259. cls.adduser.user_permissions.add(get_perm(Article, get_permission_codename('add', opts)))
  1260. # User who can change Articles
  1261. cls.changeuser.user_permissions.add(get_perm(Article, get_permission_codename('change', opts)))
  1262. cls.nostaffuser.user_permissions.add(get_perm(Article, get_permission_codename('change', opts)))
  1263. # User who can delete Articles
  1264. cls.deleteuser.user_permissions.add(get_perm(Article, get_permission_codename('delete', opts)))
  1265. cls.deleteuser.user_permissions.add(get_perm(Section, get_permission_codename('delete', Section._meta)))
  1266. # login POST dicts
  1267. cls.index_url = reverse('admin:index')
  1268. cls.super_login = {
  1269. REDIRECT_FIELD_NAME: cls.index_url,
  1270. 'username': 'super',
  1271. 'password': 'secret',
  1272. }
  1273. cls.super_email_login = {
  1274. REDIRECT_FIELD_NAME: cls.index_url,
  1275. 'username': 'super@example.com',
  1276. 'password': 'secret',
  1277. }
  1278. cls.super_email_bad_login = {
  1279. REDIRECT_FIELD_NAME: cls.index_url,
  1280. 'username': 'super@example.com',
  1281. 'password': 'notsecret',
  1282. }
  1283. cls.adduser_login = {
  1284. REDIRECT_FIELD_NAME: cls.index_url,
  1285. 'username': 'adduser',
  1286. 'password': 'secret',
  1287. }
  1288. cls.changeuser_login = {
  1289. REDIRECT_FIELD_NAME: cls.index_url,
  1290. 'username': 'changeuser',
  1291. 'password': 'secret',
  1292. }
  1293. cls.deleteuser_login = {
  1294. REDIRECT_FIELD_NAME: cls.index_url,
  1295. 'username': 'deleteuser',
  1296. 'password': 'secret',
  1297. }
  1298. cls.nostaff_login = {
  1299. REDIRECT_FIELD_NAME: reverse('has_permission_admin:index'),
  1300. 'username': 'nostaff',
  1301. 'password': 'secret',
  1302. }
  1303. cls.joepublic_login = {
  1304. REDIRECT_FIELD_NAME: cls.index_url,
  1305. 'username': 'joepublic',
  1306. 'password': 'secret',
  1307. }
  1308. cls.viewuser_login = {
  1309. REDIRECT_FIELD_NAME: cls.index_url,
  1310. 'username': 'viewuser',
  1311. 'password': 'secret',
  1312. }
  1313. cls.no_username_login = {
  1314. REDIRECT_FIELD_NAME: cls.index_url,
  1315. 'password': 'secret',
  1316. }
  1317. def test_login(self):
  1318. """
  1319. Make sure only staff members can log in.
  1320. Successful posts to the login page will redirect to the original url.
  1321. Unsuccessful attempts will continue to render the login page with
  1322. a 200 status code.
  1323. """
  1324. login_url = '%s?next=%s' % (reverse('admin:login'), reverse('admin:index'))
  1325. # Super User
  1326. response = self.client.get(self.index_url)
  1327. self.assertRedirects(response, login_url)
  1328. login = self.client.post(login_url, self.super_login)
  1329. self.assertRedirects(login, self.index_url)
  1330. self.assertFalse(login.context)
  1331. self.client.get(reverse('admin:logout'))
  1332. # Test if user enters email address
  1333. response = self.client.get(self.index_url)
  1334. self.assertEqual(response.status_code, 302)
  1335. login = self.client.post(login_url, self.super_email_login)
  1336. self.assertContains(login, ERROR_MESSAGE)
  1337. # only correct passwords get a username hint
  1338. login = self.client.post(login_url, self.super_email_bad_login)
  1339. self.assertContains(login, ERROR_MESSAGE)
  1340. new_user = User(username='jondoe', password='secret', email='super@example.com')
  1341. new_user.save()
  1342. # check to ensure if there are multiple email addresses a user doesn't get a 500
  1343. login = self.client.post(login_url, self.super_email_login)
  1344. self.assertContains(login, ERROR_MESSAGE)
  1345. # View User
  1346. response = self.client.get(self.index_url)
  1347. self.assertEqual(response.status_code, 302)
  1348. login = self.client.post(login_url, self.viewuser_login)
  1349. self.assertRedirects(login, self.index_url)
  1350. self.assertFalse(login.context)
  1351. self.client.get(reverse('admin:logout'))
  1352. # Add User
  1353. response = self.client.get(self.index_url)
  1354. self.assertEqual(response.status_code, 302)
  1355. login = self.client.post(login_url, self.adduser_login)
  1356. self.assertRedirects(login, self.index_url)
  1357. self.assertFalse(login.context)
  1358. self.client.get(reverse('admin:logout'))
  1359. # Change User
  1360. response = self.client.get(self.index_url)
  1361. self.assertEqual(response.status_code, 302)
  1362. login = self.client.post(login_url, self.changeuser_login)
  1363. self.assertRedirects(login, self.index_url)
  1364. self.assertFalse(login.context)
  1365. self.client.get(reverse('admin:logout'))
  1366. # Delete User
  1367. response = self.client.get(self.index_url)
  1368. self.assertEqual(response.status_code, 302)
  1369. login = self.client.post(login_url, self.deleteuser_login)
  1370. self.assertRedirects(login, self.index_url)
  1371. self.assertFalse(login.context)
  1372. self.client.get(reverse('admin:logout'))
  1373. # Regular User should not be able to login.
  1374. response = self.client.get(self.index_url)
  1375. self.assertEqual(response.status_code, 302)
  1376. login = self.client.post(login_url, self.joepublic_login)
  1377. self.assertEqual(login.status_code, 200)
  1378. self.assertContains(login, ERROR_MESSAGE)
  1379. # Requests without username should not return 500 errors.
  1380. response = self.client.get(self.index_url)
  1381. self.assertEqual(response.status_code, 302)
  1382. login = self.client.post(login_url, self.no_username_login)
  1383. self.assertEqual(login.status_code, 200)
  1384. self.assertFormError(login, 'form', 'username', ['This field is required.'])
  1385. def test_login_redirect_for_direct_get(self):
  1386. """
  1387. Login redirect should be to the admin index page when going directly to
  1388. /admin/login/.
  1389. """
  1390. response = self.client.get(reverse('admin:login'))
  1391. self.assertEqual(response.status_code, 200)
  1392. self.assertEqual(response.context[REDIRECT_FIELD_NAME], reverse('admin:index'))
  1393. def test_login_has_permission(self):
  1394. # Regular User should not be able to login.
  1395. response = self.client.get(reverse('has_permission_admin:index'))
  1396. self.assertEqual(response.status_code, 302)
  1397. login = self.client.post(reverse('has_permission_admin:login'), self.joepublic_login)
  1398. self.assertEqual(login.status_code, 200)
  1399. self.assertContains(login, 'permission denied')
  1400. # User with permissions should be able to login.
  1401. response = self.client.get(reverse('has_permission_admin:index'))
  1402. self.assertEqual(response.status_code, 302)
  1403. login = self.client.post(reverse('has_permission_admin:login'), self.nostaff_login)
  1404. self.assertRedirects(login, reverse('has_permission_admin:index'))
  1405. self.assertFalse(login.context)
  1406. self.client.get(reverse('has_permission_admin:logout'))
  1407. # Staff should be able to login.
  1408. response = self.client.get(reverse('has_permission_admin:index'))
  1409. self.assertEqual(response.status_code, 302)
  1410. login = self.client.post(reverse('has_permission_admin:login'), {
  1411. REDIRECT_FIELD_NAME: reverse('has_permission_admin:index'),
  1412. 'username': 'deleteuser',
  1413. 'password': 'secret',
  1414. })
  1415. self.assertRedirects(login, reverse('has_permission_admin:index'))
  1416. self.assertFalse(login.context)
  1417. self.client.get(reverse('has_permission_admin:logout'))
  1418. def test_login_successfully_redirects_to_original_URL(self):
  1419. response = self.client.get(self.index_url)
  1420. self.assertEqual(response.status_code, 302)
  1421. query_string = 'the-answer=42'
  1422. redirect_url = '%s?%s' % (self.index_url, query_string)
  1423. new_next = {REDIRECT_FIELD_NAME: redirect_url}
  1424. post_data = self.super_login.copy()
  1425. post_data.pop(REDIRECT_FIELD_NAME)
  1426. login = self.client.post(
  1427. '%s?%s' % (reverse('admin:login'), urlencode(new_next)),
  1428. post_data)
  1429. self.assertRedirects(login, redirect_url)
  1430. def test_double_login_is_not_allowed(self):
  1431. """Regression test for #19327"""
  1432. login_url = '%s?next=%s' % (reverse('admin:login'), reverse('admin:index'))
  1433. response = self.client.get(self.index_url)
  1434. self.assertEqual(response.status_code, 302)
  1435. # Establish a valid admin session
  1436. login = self.client.post(login_url, self.super_login)
  1437. self.assertRedirects(login, self.index_url)
  1438. self.assertFalse(login.context)
  1439. # Logging in with non-admin user fails
  1440. login = self.client.post(login_url, self.joepublic_login)
  1441. self.assertEqual(login.status_code, 200)
  1442. self.assertContains(login, ERROR_MESSAGE)
  1443. # Establish a valid admin session
  1444. login = self.client.post(login_url, self.super_login)
  1445. self.assertRedirects(login, self.index_url)
  1446. self.assertFalse(login.context)
  1447. # Logging in with admin user while already logged in
  1448. login = self.client.post(login_url, self.super_login)
  1449. self.assertRedirects(login, self.index_url)
  1450. self.assertFalse(login.context)
  1451. self.client.get(reverse('admin:logout'))
  1452. def test_login_page_notice_for_non_staff_users(self):
  1453. """
  1454. A logged-in non-staff user trying to access the admin index should be
  1455. presented with the login page and a hint indicating that the current
  1456. user doesn't have access to it.
  1457. """
  1458. hint_template = 'You are authenticated as {}'
  1459. # Anonymous user should not be shown the hint
  1460. response = self.client.get(self.index_url, follow=True)
  1461. self.assertContains(response, 'login-form')
  1462. self.assertNotContains(response, hint_template.format(''), status_code=200)
  1463. # Non-staff user should be shown the hint
  1464. self.client.force_login(self.nostaffuser)
  1465. response = self.client.get(self.index_url, follow=True)
  1466. self.assertContains(response, 'login-form')
  1467. self.assertContains(response, hint_template.format(self.nostaffuser.username), status_code=200)
  1468. def test_add_view(self):
  1469. """Test add view restricts access and actually adds items."""
  1470. add_dict = {'title': 'Døm ikke',
  1471. 'content': '<p>great article</p>',
  1472. 'date_0': '2008-03-18', 'date_1': '10:54:39',
  1473. 'section': self.s1.pk}
  1474. # Change User should not have access to add articles
  1475. self.client.force_login(self.changeuser)
  1476. # make sure the view removes test cookie
  1477. self.assertIs(self.client.session.test_cookie_worked(), False)
  1478. response = self.client.get(reverse('admin:admin_views_article_add'))
  1479. self.assertEqual(response.status_code, 403)
  1480. # Try POST just to make sure
  1481. post = self.client.post(reverse('admin:admin_views_article_add'), add_dict)
  1482. self.assertEqual(post.status_code, 403)
  1483. self.assertEqual(Article.objects.count(), 3)
  1484. self.client.get(reverse('admin:logout'))
  1485. # View User should not have access to add articles
  1486. self.client.force_login(self.viewuser)
  1487. response = self.client.get(reverse('admin:admin_views_article_add'))
  1488. self.assertEqual(response.status_code, 403)
  1489. # Try POST just to make sure
  1490. post = self.client.post(reverse('admin:admin_views_article_add'), add_dict)
  1491. self.assertEqual(post.status_code, 403)
  1492. self.assertEqual(Article.objects.count(), 3)
  1493. # Now give the user permission to add but not change.
  1494. self.viewuser.user_permissions.add(get_perm(Article, get_permission_codename('add', Article._meta)))
  1495. response = self.client.get(reverse('admin:admin_views_article_add'))
  1496. self.assertContains(response, '<input type="submit" value="Save and view" name="_continue">')
  1497. post = self.client.post(reverse('admin:admin_views_article_add'), add_dict, follow=False)
  1498. self.assertEqual(post.status_code, 302)
  1499. self.assertEqual(Article.objects.count(), 4)
  1500. article = Article.objects.latest('pk')
  1501. response = self.client.get(reverse('admin:admin_views_article_change', args=(article.pk,)))
  1502. self.assertContains(response, '<li class="success">The article "Døm ikke" was added successfully.</li>')
  1503. article.delete()
  1504. self.client.get(reverse('admin:logout'))
  1505. # Add user may login and POST to add view, then redirect to admin root
  1506. self.client.force_login(self.adduser)
  1507. addpage = self.client.get(reverse('admin:admin_views_article_add'))
  1508. change_list_link = '&rsaquo; <a href="%s">Articles</a>' % reverse('admin:admin_views_article_changelist')
  1509. self.assertNotContains(
  1510. addpage, change_list_link,
  1511. msg_prefix='User restricted to add permission is given link to change list view in breadcrumbs.'
  1512. )
  1513. post = self.client.post(reverse('admin:admin_views_article_add'), add_dict)
  1514. self.assertRedirects(post, self.index_url)
  1515. self.assertEqual(Article.objects.count(), 4)
  1516. self.assertEqual(len(mail.outbox), 2)
  1517. self.assertEqual(mail.outbox[0].subject, 'Greetings from a created object')
  1518. self.client.get(reverse('admin:logout'))
  1519. # The addition was logged correctly
  1520. addition_log = LogEntry.objects.all()[0]
  1521. new_article = Article.objects.last()
  1522. article_ct = ContentType.objects.get_for_model(Article)
  1523. self.assertEqual(addition_log.user_id, self.adduser.pk)
  1524. self.assertEqual(addition_log.content_type_id, article_ct.pk)
  1525. self.assertEqual(addition_log.object_id, str(new_article.pk))
  1526. self.assertEqual(addition_log.object_repr, "Døm ikke")
  1527. self.assertEqual(addition_log.action_flag, ADDITION)
  1528. self.assertEqual(addition_log.get_change_message(), "Added.")
  1529. # Super can add too, but is redirected to the change list view
  1530. self.client.force_login(self.superuser)
  1531. addpage = self.client.get(reverse('admin:admin_views_article_add'))
  1532. self.assertContains(
  1533. addpage, change_list_link,
  1534. msg_prefix='Unrestricted user is not given link to change list view in breadcrumbs.'
  1535. )
  1536. post = self.client.post(reverse('admin:admin_views_article_add'), add_dict)
  1537. self.assertRedirects(post, reverse('admin:admin_views_article_changelist'))
  1538. self.assertEqual(Article.objects.count(), 5)
  1539. self.client.get(reverse('admin:logout'))
  1540. # 8509 - if a normal user is already logged in, it is possible
  1541. # to change user into the superuser without error
  1542. self.client.force_login(self.joepublicuser)
  1543. # Check and make sure that if user expires, data still persists
  1544. self.client.force_login(self.superuser)
  1545. # make sure the view removes test cookie
  1546. self.assertIs(self.client.session.test_cookie_worked(), False)
  1547. def test_change_view(self):
  1548. """Change view should restrict access and allow users to edit items."""
  1549. change_dict = {'title': 'Ikke fordømt',
  1550. 'content': '<p>edited article</p>',
  1551. 'date_0': '2008-03-18', 'date_1': '10:54:39',
  1552. 'section': self.s1.pk}
  1553. article_change_url = reverse('admin:admin_views_article_change', args=(self.a1.pk,))
  1554. article_changelist_url = reverse('admin:admin_views_article_changelist')
  1555. # add user should not be able to view the list of article or change any of them
  1556. self.client.force_login(self.adduser)
  1557. response = self.client.get(article_changelist_url)
  1558. self.assertEqual(response.status_code, 403)
  1559. response = self.client.get(article_change_url)
  1560. self.assertEqual(response.status_code, 403)
  1561. post = self.client.post(article_change_url, change_dict)
  1562. self.assertEqual(post.status_code, 403)
  1563. self.client.get(reverse('admin:logout'))
  1564. # view user should be able to view the article but not change any of them
  1565. # (the POST can be sent, but no modification occures)
  1566. self.client.force_login(self.viewuser)
  1567. response = self.client.get(article_changelist_url)
  1568. self.assertEqual(response.status_code, 200)
  1569. response = self.client.get(article_change_url)
  1570. self.assertEqual(response.status_code, 200)
  1571. self.assertContains(response, '<a href="/test_admin/admin/admin_views/article/" class="closelink">Close</a>')
  1572. post = self.client.post(article_change_url, change_dict)
  1573. self.assertEqual(post.status_code, 302)
  1574. self.assertEqual(Article.objects.get(pk=self.a1.pk).content, '<p>Middle content</p>')
  1575. self.client.get(reverse('admin:logout'))
  1576. # change user can view all items and edit them
  1577. self.client.force_login(self.changeuser)
  1578. response = self.client.get(article_changelist_url)
  1579. self.assertEqual(response.status_code, 200)
  1580. response = self.client.get(article_change_url)
  1581. self.assertEqual(response.status_code, 200)
  1582. post = self.client.post(article_change_url, change_dict)
  1583. self.assertRedirects(post, article_changelist_url)
  1584. self.assertEqual(Article.objects.get(pk=self.a1.pk).content, '<p>edited article</p>')
  1585. # one error in form should produce singular error message, multiple errors plural
  1586. change_dict['title'] = ''
  1587. post = self.client.post(article_change_url, change_dict)
  1588. self.assertContains(
  1589. post, 'Please correct the error below.',
  1590. msg_prefix='Singular error message not found in response to post with one error'
  1591. )
  1592. change_dict['content'] = ''
  1593. post = self.client.post(article_change_url, change_dict)
  1594. self.assertContains(
  1595. post, 'Please correct the errors below.',
  1596. msg_prefix='Plural error message not found in response to post with multiple errors'
  1597. )
  1598. self.client.get(reverse('admin:logout'))
  1599. # Test redirection when using row-level change permissions. Refs #11513.
  1600. r1 = RowLevelChangePermissionModel.objects.create(id=1, name="odd id")
  1601. r2 = RowLevelChangePermissionModel.objects.create(id=2, name="even id")
  1602. r3 = RowLevelChangePermissionModel.objects.create(id=3, name='odd id mult 3')
  1603. r6 = RowLevelChangePermissionModel.objects.create(id=6, name='even id mult 3')
  1604. change_url_1 = reverse('admin:admin_views_rowlevelchangepermissionmodel_change', args=(r1.pk,))
  1605. change_url_2 = reverse('admin:admin_views_rowlevelchangepermissionmodel_change', args=(r2.pk,))
  1606. change_url_3 = reverse('admin:admin_views_rowlevelchangepermissionmodel_change', args=(r3.pk,))
  1607. change_url_6 = reverse('admin:admin_views_rowlevelchangepermissionmodel_change', args=(r6.pk,))
  1608. logins = [self.superuser, self.viewuser, self.adduser, self.changeuser, self.deleteuser]
  1609. for login_user in logins:
  1610. self.client.force_login(login_user)
  1611. response = self.client.get(change_url_1)
  1612. self.assertEqual(response.status_code, 403)
  1613. response = self.client.post(change_url_1, {'name': 'changed'})
  1614. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=1).name, 'odd id')
  1615. self.assertEqual(response.status_code, 403)
  1616. response = self.client.get(change_url_2)
  1617. self.assertEqual(response.status_code, 200)
  1618. response = self.client.post(change_url_2, {'name': 'changed'})
  1619. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=2).name, 'changed')
  1620. self.assertRedirects(response, self.index_url)
  1621. response = self.client.get(change_url_3)
  1622. self.assertEqual(response.status_code, 200)
  1623. response = self.client.post(change_url_3, {'name': 'changed'})
  1624. self.assertEqual(response.status_code, 302)
  1625. self.assertRedirects(response, self.index_url)
  1626. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=3).name, 'odd id mult 3')
  1627. response = self.client.get(change_url_6)
  1628. self.assertEqual(response.status_code, 200)
  1629. response = self.client.post(change_url_6, {'name': 'changed'})
  1630. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=6).name, 'changed')
  1631. self.assertRedirects(response, self.index_url)
  1632. self.client.get(reverse('admin:logout'))
  1633. for login_user in [self.joepublicuser, self.nostaffuser]:
  1634. self.client.force_login(login_user)
  1635. response = self.client.get(change_url_1, follow=True)
  1636. self.assertContains(response, 'login-form')
  1637. response = self.client.post(change_url_1, {'name': 'changed'}, follow=True)
  1638. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=1).name, 'odd id')
  1639. self.assertContains(response, 'login-form')
  1640. response = self.client.get(change_url_2, follow=True)
  1641. self.assertContains(response, 'login-form')
  1642. response = self.client.post(change_url_2, {'name': 'changed again'}, follow=True)
  1643. self.assertEqual(RowLevelChangePermissionModel.objects.get(id=2).name, 'changed')
  1644. self.assertContains(response, 'login-form')
  1645. self.client.get(reverse('admin:logout'))
  1646. def test_change_view_save_as_new(self):
  1647. """
  1648. 'Save as new' should raise PermissionDenied for users without the 'add'
  1649. permission.
  1650. """
  1651. change_dict_save_as_new = {
  1652. '_saveasnew': 'Save as new',
  1653. 'title': 'Ikke fordømt',
  1654. 'content': '<p>edited article</p>',
  1655. 'date_0': '2008-03-18', 'date_1': '10:54:39',
  1656. 'section': self.s1.pk,
  1657. }
  1658. article_change_url = reverse('admin:admin_views_article_change', args=(self.a1.pk,))
  1659. # Add user can perform "Save as new".
  1660. article_count = Article.objects.count()
  1661. self.client.force_login(self.adduser)
  1662. post = self.client.post(article_change_url, change_dict_save_as_new)
  1663. self.assertRedirects(post, self.index_url)
  1664. self.assertEqual(Article.objects.count(), article_count + 1)
  1665. self.client.logout()
  1666. # Change user cannot perform "Save as new" (no 'add' permission).
  1667. article_count = Article.objects.count()
  1668. self.client.force_login(self.changeuser)
  1669. post = self.client.post(article_change_url, change_dict_save_as_new)
  1670. self.assertEqual(post.status_code, 403)
  1671. self.assertEqual(Article.objects.count(), article_count)
  1672. # User with both add and change permissions should be redirected to the
  1673. # change page for the newly created object.
  1674. article_count = Article.objects.count()
  1675. self.client.force_login(self.superuser)
  1676. post = self.client.post(article_change_url, change_dict_save_as_new)
  1677. self.assertEqual(Article.objects.count(), article_count + 1)
  1678. new_article = Article.objects.latest('id')
  1679. self.assertRedirects(post, reverse('admin:admin_views_article_change', args=(new_article.pk,)))
  1680. def test_delete_view(self):
  1681. """Delete view should restrict access and actually delete items."""
  1682. delete_dict = {'post': 'yes'}
  1683. delete_url = reverse('admin:admin_views_article_delete', args=(self.a1.pk,))
  1684. # add user should not be able to delete articles
  1685. self.client.force_login(self.adduser)
  1686. response = self.client.get(delete_url)
  1687. self.assertEqual(response.status_code, 403)
  1688. post = self.client.post(delete_url, delete_dict)
  1689. self.assertEqual(post.status_code, 403)
  1690. self.assertEqual(Article.objects.count(), 3)
  1691. self.client.logout()
  1692. # view user should not be able to delete articles
  1693. self.client.force_login(self.viewuser)
  1694. response = self.client.get(delete_url)
  1695. self.assertEqual(response.status_code, 403)
  1696. post = self.client.post(delete_url, delete_dict)
  1697. self.assertEqual(post.status_code, 403)
  1698. self.assertEqual(Article.objects.count(), 3)
  1699. self.client.logout()
  1700. # Delete user can delete
  1701. self.client.force_login(self.deleteuser)
  1702. response = self.client.get(reverse('admin:admin_views_section_delete', args=(self.s1.pk,)))
  1703. self.assertContains(response, "<h2>Summary</h2>")
  1704. self.assertContains(response, "<li>Articles: 3</li>")
  1705. # test response contains link to related Article
  1706. self.assertContains(response, "admin_views/article/%s/" % self.a1.pk)
  1707. response = self.client.get(delete_url)
  1708. self.assertContains(response, "admin_views/article/%s/" % self.a1.pk)
  1709. self.assertContains(response, "<h2>Summary</h2>")
  1710. self.assertContains(response, "<li>Articles: 1</li>")
  1711. self.assertEqual(response.status_code, 200)
  1712. post = self.client.post(delete_url, delete_dict)
  1713. self.assertRedirects(post, self.index_url)
  1714. self.assertEqual(Article.objects.count(), 2)
  1715. self.assertEqual(len(mail.outbox), 1)
  1716. self.assertEqual(mail.outbox[0].subject, 'Greetings from a deleted object')
  1717. article_ct = ContentType.objects.get_for_model(Article)
  1718. logged = LogEntry.objects.get(content_type=article_ct, action_flag=DELETION)
  1719. self.assertEqual(logged.object_id, str(self.a1.pk))
  1720. def test_delete_view_with_no_default_permissions(self):
  1721. """
  1722. The delete view allows users to delete collected objects without a
  1723. 'delete' permission (ReadOnlyPizza.Meta.default_permissions is empty).
  1724. """
  1725. pizza = ReadOnlyPizza.objects.create(name='Double Cheese')
  1726. delete_url = reverse('admin:admin_views_readonlypizza_delete', args=(pizza.pk,))
  1727. self.client.force_login(self.adduser)
  1728. response = self.client.get(delete_url)
  1729. self.assertContains(response, 'admin_views/readonlypizza/%s/' % pizza.pk)
  1730. self.assertContains(response, '<h2>Summary</h2>')
  1731. self.assertContains(response, '<li>Read only pizzas: 1</li>')
  1732. self.assertEqual(response.status_code, 200)
  1733. post = self.client.post(delete_url, {'post': 'yes'})
  1734. self.assertRedirects(post, reverse('admin:admin_views_readonlypizza_changelist'))
  1735. self.assertEqual(ReadOnlyPizza.objects.count(), 0)
  1736. def test_delete_view_nonexistent_obj(self):
  1737. self.client.force_login(self.deleteuser)
  1738. url = reverse('admin:admin_views_article_delete', args=('nonexistent',))
  1739. response = self.client.get(url, follow=True)
  1740. self.assertRedirects(response, reverse('admin:index'))
  1741. self.assertEqual(
  1742. [m.message for m in response.context['messages']],
  1743. ["""article with ID "nonexistent" doesn't exist. Perhaps it was deleted?"""]
  1744. )
  1745. def test_history_view(self):
  1746. """History view should restrict access."""
  1747. # add user should not be able to view the list of article or change any of them
  1748. self.client.force_login(self.adduser)
  1749. response = self.client.get(reverse('admin:admin_views_article_history', args=(self.a1.pk,)))
  1750. self.assertEqual(response.status_code, 403)
  1751. self.client.get(reverse('admin:logout'))
  1752. # view user can view all items
  1753. self.client.force_login(self.viewuser)
  1754. response = self.client.get(reverse('admin:admin_views_article_history', args=(self.a1.pk,)))
  1755. self.assertEqual(response.status_code, 200)
  1756. self.client.get(reverse('admin:logout'))
  1757. # change user can view all items and edit them
  1758. self.client.force_login(self.changeuser)
  1759. response = self.client.get(reverse('admin:admin_views_article_history', args=(self.a1.pk,)))
  1760. self.assertEqual(response.status_code, 200)
  1761. # Test redirection when using row-level change permissions. Refs #11513.
  1762. rl1 = RowLevelChangePermissionModel.objects.create(name="odd id")
  1763. rl2 = RowLevelChangePermissionModel.objects.create(name="even id")
  1764. logins = [self.superuser, self.viewuser, self.adduser, self.changeuser, self.deleteuser]
  1765. for login_user in logins:
  1766. self.client.force_login(login_user)
  1767. url = reverse('admin:admin_views_rowlevelchangepermissionmodel_history', args=(rl1.pk,))
  1768. response = self.client.get(url)
  1769. self.assertEqual(response.status_code, 403)
  1770. url = reverse('admin:admin_views_rowlevelchangepermissionmodel_history', args=(rl2.pk,))
  1771. response = self.client.get(url)
  1772. self.assertEqual(response.status_code, 200)
  1773. self.client.get(reverse('admin:logout'))
  1774. for login_user in [self.joepublicuser, self.nostaffuser]:
  1775. self.client.force_login(login_user)
  1776. url = reverse('admin:admin_views_rowlevelchangepermissionmodel_history', args=(rl1.pk,))
  1777. response = self.client.get(url, follow=True)
  1778. self.assertContains(response, 'login-form')
  1779. url = reverse('admin:admin_views_rowlevelchangepermissionmodel_history', args=(rl2.pk,))
  1780. response = self.client.get(url, follow=True)
  1781. self.assertContains(response, 'login-form')
  1782. self.client.get(reverse('admin:logout'))
  1783. def test_history_view_bad_url(self):
  1784. self.client.force_login(self.changeuser)
  1785. response = self.client.get(reverse('admin:admin_views_article_history', args=('foo',)), follow=True)
  1786. self.assertRedirects(response, reverse('admin:index'))
  1787. self.assertEqual(
  1788. [m.message for m in response.context['messages']],
  1789. ["""article with ID "foo" doesn't exist. Perhaps it was deleted?"""]
  1790. )
  1791. def test_conditionally_show_add_section_link(self):
  1792. """
  1793. The foreign key widget should only show the "add related" button if the
  1794. user has permission to add that related item.
  1795. """
  1796. self.client.force_login(self.adduser)
  1797. # The user can't add sections yet, so they shouldn't see the "add section" link.
  1798. url = reverse('admin:admin_views_article_add')
  1799. add_link_text = 'add_id_section'
  1800. response = self.client.get(url)
  1801. self.assertNotContains(response, add_link_text)
  1802. # Allow the user to add sections too. Now they can see the "add section" link.
  1803. user = User.objects.get(username='adduser')
  1804. perm = get_perm(Section, get_permission_codename('add', Section._meta))
  1805. user.user_permissions.add(perm)
  1806. response = self.client.get(url)
  1807. self.assertContains(response, add_link_text)
  1808. def test_conditionally_show_change_section_link(self):
  1809. """
  1810. The foreign key widget should only show the "change related" button if
  1811. the user has permission to change that related item.
  1812. """
  1813. def get_change_related(response):
  1814. return response.context['adminform'].form.fields['section'].widget.can_change_related
  1815. self.client.force_login(self.adduser)
  1816. # The user can't change sections yet, so they shouldn't see the "change section" link.
  1817. url = reverse('admin:admin_views_article_add')
  1818. change_link_text = 'change_id_section'
  1819. response = self.client.get(url)
  1820. self.assertFalse(get_change_related(response))
  1821. self.assertNotContains(response, change_link_text)
  1822. # Allow the user to change sections too. Now they can see the "change section" link.
  1823. user = User.objects.get(username='adduser')
  1824. perm = get_perm(Section, get_permission_codename('change', Section._meta))
  1825. user.user_permissions.add(perm)
  1826. response = self.client.get(url)
  1827. self.assertTrue(get_change_related(response))
  1828. self.assertContains(response, change_link_text)
  1829. def test_conditionally_show_delete_section_link(self):
  1830. """
  1831. The foreign key widget should only show the "delete related" button if
  1832. the user has permission to delete that related item.
  1833. """
  1834. def get_delete_related(response):
  1835. return response.context['adminform'].form.fields['sub_section'].widget.can_delete_related
  1836. self.client.force_login(self.adduser)
  1837. # The user can't delete sections yet, so they shouldn't see the "delete section" link.
  1838. url = reverse('admin:admin_views_article_add')
  1839. delete_link_text = 'delete_id_sub_section'
  1840. response = self.client.get(url)
  1841. self.assertFalse(get_delete_related(response))
  1842. self.assertNotContains(response, delete_link_text)
  1843. # Allow the user to delete sections too. Now they can see the "delete section" link.
  1844. user = User.objects.get(username='adduser')
  1845. perm = get_perm(Section, get_permission_codename('delete', Section._meta))
  1846. user.user_permissions.add(perm)
  1847. response = self.client.get(url)
  1848. self.assertTrue(get_delete_related(response))
  1849. self.assertContains(response, delete_link_text)
  1850. def test_disabled_permissions_when_logged_in(self):
  1851. self.client.force_login(self.superuser)
  1852. superuser = User.objects.get(username='super')
  1853. superuser.is_active = False
  1854. superuser.save()
  1855. response = self.client.get(self.index_url, follow=True)
  1856. self.assertContains(response, 'id="login-form"')
  1857. self.assertNotContains(response, 'Log out')
  1858. response = self.client.get(reverse('secure_view'), follow=True)
  1859. self.assertContains(response, 'id="login-form"')
  1860. def test_disabled_staff_permissions_when_logged_in(self):
  1861. self.client.force_login(self.superuser)
  1862. superuser = User.objects.get(username='super')
  1863. superuser.is_staff = False
  1864. superuser.save()
  1865. response = self.client.get(self.index_url, follow=True)
  1866. self.assertContains(response, 'id="login-form"')
  1867. self.assertNotContains(response, 'Log out')
  1868. response = self.client.get(reverse('secure_view'), follow=True)
  1869. self.assertContains(response, 'id="login-form"')
  1870. def test_app_list_permissions(self):
  1871. """
  1872. If a user has no module perms, the app list returns a 404.
  1873. """
  1874. opts = Article._meta
  1875. change_user = User.objects.get(username='changeuser')
  1876. permission = get_perm(Article, get_permission_codename('change', opts))
  1877. self.client.force_login(self.changeuser)
  1878. # the user has no module permissions
  1879. change_user.user_permissions.remove(permission)
  1880. response = self.client.get(reverse('admin:app_list', args=('admin_views',)))
  1881. self.assertEqual(response.status_code, 404)
  1882. # the user now has module permissions
  1883. change_user.user_permissions.add(permission)
  1884. response = self.client.get(reverse('admin:app_list', args=('admin_views',)))
  1885. self.assertEqual(response.status_code, 200)
  1886. def test_shortcut_view_only_available_to_staff(self):
  1887. """
  1888. Only admin users should be able to use the admin shortcut view.
  1889. """
  1890. model_ctype = ContentType.objects.get_for_model(ModelWithStringPrimaryKey)
  1891. obj = ModelWithStringPrimaryKey.objects.create(string_pk='foo')
  1892. shortcut_url = reverse('admin:view_on_site', args=(model_ctype.pk, obj.pk))
  1893. # Not logged in: we should see the login page.
  1894. response = self.client.get(shortcut_url, follow=True)
  1895. self.assertTemplateUsed(response, 'admin/login.html')
  1896. # Logged in? Redirect.
  1897. self.client.force_login(self.superuser)
  1898. response = self.client.get(shortcut_url, follow=False)
  1899. # Can't use self.assertRedirects() because User.get_absolute_url() is silly.
  1900. self.assertEqual(response.status_code, 302)
  1901. # Domain may depend on contrib.sites tests also run
  1902. self.assertRegex(response.url, 'http://(testserver|example.com)/dummy/foo/')
  1903. def test_has_module_permission(self):
  1904. """
  1905. has_module_permission() returns True for all users who
  1906. have any permission for that module (add, change, or delete), so that
  1907. the module is displayed on the admin index page.
  1908. """
  1909. self.client.force_login(self.superuser)
  1910. response = self.client.get(self.index_url)
  1911. self.assertContains(response, 'admin_views')
  1912. self.assertContains(response, 'Articles')
  1913. self.client.logout()
  1914. self.client.force_login(self.viewuser)
  1915. response = self.client.get(self.index_url)
  1916. self.assertContains(response, 'admin_views')
  1917. self.assertContains(response, 'Articles')
  1918. self.client.logout()
  1919. self.client.force_login(self.adduser)
  1920. response = self.client.get(self.index_url)
  1921. self.assertContains(response, 'admin_views')
  1922. self.assertContains(response, 'Articles')
  1923. self.client.logout()
  1924. self.client.force_login(self.changeuser)
  1925. response = self.client.get(self.index_url)
  1926. self.assertContains(response, 'admin_views')
  1927. self.assertContains(response, 'Articles')
  1928. self.client.logout()
  1929. self.client.force_login(self.deleteuser)
  1930. response = self.client.get(self.index_url)
  1931. self.assertContains(response, 'admin_views')
  1932. self.assertContains(response, 'Articles')
  1933. def test_overriding_has_module_permission(self):
  1934. """
  1935. If has_module_permission() always returns False, the module shouldn't
  1936. be displayed on the admin index page for any users.
  1937. """
  1938. articles = Article._meta.verbose_name_plural.title()
  1939. sections = Section._meta.verbose_name_plural.title()
  1940. index_url = reverse('admin7:index')
  1941. self.client.force_login(self.superuser)
  1942. response = self.client.get(index_url)
  1943. self.assertContains(response, sections)
  1944. self.assertNotContains(response, articles)
  1945. self.client.logout()
  1946. self.client.force_login(self.viewuser)
  1947. response = self.client.get(index_url)
  1948. self.assertNotContains(response, 'admin_views')
  1949. self.assertNotContains(response, articles)
  1950. self.client.logout()
  1951. self.client.force_login(self.adduser)
  1952. response = self.client.get(index_url)
  1953. self.assertNotContains(response, 'admin_views')
  1954. self.assertNotContains(response, articles)
  1955. self.client.logout()
  1956. self.client.force_login(self.changeuser)
  1957. response = self.client.get(index_url)
  1958. self.assertNotContains(response, 'admin_views')
  1959. self.assertNotContains(response, articles)
  1960. self.client.logout()
  1961. self.client.force_login(self.deleteuser)
  1962. response = self.client.get(index_url)
  1963. self.assertNotContains(response, articles)
  1964. # The app list displays Sections but not Articles as the latter has
  1965. # ModelAdmin.has_module_permission() = False.
  1966. self.client.force_login(self.superuser)
  1967. response = self.client.get(reverse('admin7:app_list', args=('admin_views',)))
  1968. self.assertContains(response, sections)
  1969. self.assertNotContains(response, articles)
  1970. def test_post_save_message_no_forbidden_links_visible(self):
  1971. """
  1972. Post-save message shouldn't contain a link to the change form if the
  1973. user doen't have the change permission.
  1974. """
  1975. self.client.force_login(self.adduser)
  1976. # Emulate Article creation for user with add-only permission.
  1977. post_data = {
  1978. "title": "Fun & games",
  1979. "content": "Some content",
  1980. "date_0": "2015-10-31",
  1981. "date_1": "16:35:00",
  1982. "_save": "Save",
  1983. }
  1984. response = self.client.post(reverse('admin:admin_views_article_add'), post_data, follow=True)
  1985. self.assertContains(
  1986. response,
  1987. '<li class="success">The article "Fun &amp; games" was added successfully.</li>',
  1988. html=True
  1989. )
  1990. @override_settings(ROOT_URLCONF='admin_views.urls')
  1991. class AdminViewsNoUrlTest(TestCase):
  1992. """Regression test for #17333"""
  1993. @classmethod
  1994. def setUpTestData(cls):
  1995. # User who can change Reports
  1996. cls.changeuser = User.objects.create_user(username='changeuser', password='secret', is_staff=True)
  1997. cls.changeuser.user_permissions.add(get_perm(Report, get_permission_codename('change', Report._meta)))
  1998. def test_no_standard_modeladmin_urls(self):
  1999. """Admin index views don't break when user's ModelAdmin removes standard urls"""
  2000. self.client.force_login(self.changeuser)
  2001. r = self.client.get(reverse('admin:index'))
  2002. # we shouldn't get a 500 error caused by a NoReverseMatch
  2003. self.assertEqual(r.status_code, 200)
  2004. self.client.get(reverse('admin:logout'))
  2005. @skipUnlessDBFeature('can_defer_constraint_checks')
  2006. @override_settings(ROOT_URLCONF='admin_views.urls')
  2007. class AdminViewDeletedObjectsTest(TestCase):
  2008. @classmethod
  2009. def setUpTestData(cls):
  2010. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2011. cls.deleteuser = User.objects.create_user(username='deleteuser', password='secret', is_staff=True)
  2012. cls.s1 = Section.objects.create(name='Test section')
  2013. cls.a1 = Article.objects.create(
  2014. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  2015. )
  2016. cls.a2 = Article.objects.create(
  2017. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  2018. )
  2019. cls.a3 = Article.objects.create(
  2020. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  2021. )
  2022. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  2023. cls.v1 = Villain.objects.create(name='Adam')
  2024. cls.v2 = Villain.objects.create(name='Sue')
  2025. cls.sv1 = SuperVillain.objects.create(name='Bob')
  2026. cls.pl1 = Plot.objects.create(name='World Domination', team_leader=cls.v1, contact=cls.v2)
  2027. cls.pl2 = Plot.objects.create(name='World Peace', team_leader=cls.v2, contact=cls.v2)
  2028. cls.pl3 = Plot.objects.create(name='Corn Conspiracy', team_leader=cls.v1, contact=cls.v1)
  2029. cls.pd1 = PlotDetails.objects.create(details='almost finished', plot=cls.pl1)
  2030. cls.sh1 = SecretHideout.objects.create(location='underground bunker', villain=cls.v1)
  2031. cls.sh2 = SecretHideout.objects.create(location='floating castle', villain=cls.sv1)
  2032. cls.ssh1 = SuperSecretHideout.objects.create(location='super floating castle!', supervillain=cls.sv1)
  2033. cls.cy1 = CyclicOne.objects.create(name='I am recursive', two_id=1)
  2034. cls.cy2 = CyclicTwo.objects.create(name='I am recursive too', one_id=1)
  2035. def setUp(self):
  2036. self.client.force_login(self.superuser)
  2037. def test_nesting(self):
  2038. """
  2039. Objects should be nested to display the relationships that
  2040. cause them to be scheduled for deletion.
  2041. """
  2042. pattern = re.compile(
  2043. r'<li>Plot: <a href="%s">World Domination</a>\s*<ul>\s*'
  2044. r'<li>Plot details: <a href="%s">almost finished</a>' % (
  2045. reverse('admin:admin_views_plot_change', args=(self.pl1.pk,)),
  2046. reverse('admin:admin_views_plotdetails_change', args=(self.pd1.pk,)),
  2047. )
  2048. )
  2049. response = self.client.get(reverse('admin:admin_views_villain_delete', args=(self.v1.pk,)))
  2050. self.assertRegex(response.content.decode(), pattern)
  2051. def test_cyclic(self):
  2052. """
  2053. Cyclic relationships should still cause each object to only be
  2054. listed once.
  2055. """
  2056. one = '<li>Cyclic one: <a href="%s">I am recursive</a>' % (
  2057. reverse('admin:admin_views_cyclicone_change', args=(self.cy1.pk,)),
  2058. )
  2059. two = '<li>Cyclic two: <a href="%s">I am recursive too</a>' % (
  2060. reverse('admin:admin_views_cyclictwo_change', args=(self.cy2.pk,)),
  2061. )
  2062. response = self.client.get(reverse('admin:admin_views_cyclicone_delete', args=(self.cy1.pk,)))
  2063. self.assertContains(response, one, 1)
  2064. self.assertContains(response, two, 1)
  2065. def test_perms_needed(self):
  2066. self.client.logout()
  2067. delete_user = User.objects.get(username='deleteuser')
  2068. delete_user.user_permissions.add(get_perm(Plot, get_permission_codename('delete', Plot._meta)))
  2069. self.client.force_login(self.deleteuser)
  2070. response = self.client.get(reverse('admin:admin_views_plot_delete', args=(self.pl1.pk,)))
  2071. self.assertContains(response, "your account doesn't have permission to delete the following types of objects")
  2072. self.assertContains(response, "<li>plot details</li>")
  2073. def test_protected(self):
  2074. q = Question.objects.create(question="Why?")
  2075. a1 = Answer.objects.create(question=q, answer="Because.")
  2076. a2 = Answer.objects.create(question=q, answer="Yes.")
  2077. response = self.client.get(reverse('admin:admin_views_question_delete', args=(q.pk,)))
  2078. self.assertContains(response, "would require deleting the following protected related objects")
  2079. self.assertContains(
  2080. response,
  2081. '<li>Answer: <a href="%s">Because.</a></li>' % reverse('admin:admin_views_answer_change', args=(a1.pk,))
  2082. )
  2083. self.assertContains(
  2084. response,
  2085. '<li>Answer: <a href="%s">Yes.</a></li>' % reverse('admin:admin_views_answer_change', args=(a2.pk,))
  2086. )
  2087. def test_post_delete_protected(self):
  2088. """
  2089. A POST request to delete protected objects should display the page
  2090. which says the deletion is prohibited.
  2091. """
  2092. q = Question.objects.create(question='Why?')
  2093. Answer.objects.create(question=q, answer='Because.')
  2094. response = self.client.post(reverse('admin:admin_views_question_delete', args=(q.pk,)), {'post': 'yes'})
  2095. self.assertEqual(Question.objects.count(), 1)
  2096. self.assertContains(response, "would require deleting the following protected related objects")
  2097. def test_not_registered(self):
  2098. should_contain = """<li>Secret hideout: underground bunker"""
  2099. response = self.client.get(reverse('admin:admin_views_villain_delete', args=(self.v1.pk,)))
  2100. self.assertContains(response, should_contain, 1)
  2101. def test_multiple_fkeys_to_same_model(self):
  2102. """
  2103. If a deleted object has two relationships from another model,
  2104. both of those should be followed in looking for related
  2105. objects to delete.
  2106. """
  2107. should_contain = '<li>Plot: <a href="%s">World Domination</a>' % reverse(
  2108. 'admin:admin_views_plot_change', args=(self.pl1.pk,)
  2109. )
  2110. response = self.client.get(reverse('admin:admin_views_villain_delete', args=(self.v1.pk,)))
  2111. self.assertContains(response, should_contain)
  2112. response = self.client.get(reverse('admin:admin_views_villain_delete', args=(self.v2.pk,)))
  2113. self.assertContains(response, should_contain)
  2114. def test_multiple_fkeys_to_same_instance(self):
  2115. """
  2116. If a deleted object has two relationships pointing to it from
  2117. another object, the other object should still only be listed
  2118. once.
  2119. """
  2120. should_contain = '<li>Plot: <a href="%s">World Peace</a></li>' % reverse(
  2121. 'admin:admin_views_plot_change', args=(self.pl2.pk,)
  2122. )
  2123. response = self.client.get(reverse('admin:admin_views_villain_delete', args=(self.v2.pk,)))
  2124. self.assertContains(response, should_contain, 1)
  2125. def test_inheritance(self):
  2126. """
  2127. In the case of an inherited model, if either the child or
  2128. parent-model instance is deleted, both instances are listed
  2129. for deletion, as well as any relationships they have.
  2130. """
  2131. should_contain = [
  2132. '<li>Villain: <a href="%s">Bob</a>' % reverse('admin:admin_views_villain_change', args=(self.sv1.pk,)),
  2133. '<li>Super villain: <a href="%s">Bob</a>' % reverse(
  2134. 'admin:admin_views_supervillain_change', args=(self.sv1.pk,)
  2135. ),
  2136. '<li>Secret hideout: floating castle',
  2137. '<li>Super secret hideout: super floating castle!',
  2138. ]
  2139. response = self.client.get(reverse('admin:admin_views_villain_delete', args=(self.sv1.pk,)))
  2140. for should in should_contain:
  2141. self.assertContains(response, should, 1)
  2142. response = self.client.get(reverse('admin:admin_views_supervillain_delete', args=(self.sv1.pk,)))
  2143. for should in should_contain:
  2144. self.assertContains(response, should, 1)
  2145. def test_generic_relations(self):
  2146. """
  2147. If a deleted object has GenericForeignKeys pointing to it,
  2148. those objects should be listed for deletion.
  2149. """
  2150. plot = self.pl3
  2151. tag = FunkyTag.objects.create(content_object=plot, name='hott')
  2152. should_contain = '<li>Funky tag: <a href="%s">hott' % reverse(
  2153. 'admin:admin_views_funkytag_change', args=(tag.id,))
  2154. response = self.client.get(reverse('admin:admin_views_plot_delete', args=(plot.pk,)))
  2155. self.assertContains(response, should_contain)
  2156. def test_generic_relations_with_related_query_name(self):
  2157. """
  2158. If a deleted object has GenericForeignKey with
  2159. GenericRelation(related_query_name='...') pointing to it, those objects
  2160. should be listed for deletion.
  2161. """
  2162. bookmark = Bookmark.objects.create(name='djangoproject')
  2163. tag = FunkyTag.objects.create(content_object=bookmark, name='django')
  2164. tag_url = reverse('admin:admin_views_funkytag_change', args=(tag.id,))
  2165. should_contain = '<li>Funky tag: <a href="%s">django' % tag_url
  2166. response = self.client.get(reverse('admin:admin_views_bookmark_delete', args=(bookmark.pk,)))
  2167. self.assertContains(response, should_contain)
  2168. def test_delete_view_uses_get_deleted_objects(self):
  2169. """The delete view uses ModelAdmin.get_deleted_objects()."""
  2170. book = Book.objects.create(name='Test Book')
  2171. response = self.client.get(reverse('admin2:admin_views_book_delete', args=(book.pk,)))
  2172. # BookAdmin.get_deleted_objects() returns custom text.
  2173. self.assertContains(response, 'a deletable object')
  2174. @override_settings(ROOT_URLCONF='admin_views.urls')
  2175. class TestGenericRelations(TestCase):
  2176. @classmethod
  2177. def setUpTestData(cls):
  2178. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2179. cls.v1 = Villain.objects.create(name='Adam')
  2180. cls.pl3 = Plot.objects.create(name='Corn Conspiracy', team_leader=cls.v1, contact=cls.v1)
  2181. def setUp(self):
  2182. self.client.force_login(self.superuser)
  2183. def test_generic_content_object_in_list_display(self):
  2184. FunkyTag.objects.create(content_object=self.pl3, name='hott')
  2185. response = self.client.get(reverse('admin:admin_views_funkytag_changelist'))
  2186. self.assertContains(response, "%s</td>" % self.pl3)
  2187. @override_settings(ROOT_URLCONF='admin_views.urls')
  2188. class AdminViewStringPrimaryKeyTest(TestCase):
  2189. @classmethod
  2190. def setUpTestData(cls):
  2191. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2192. cls.s1 = Section.objects.create(name='Test section')
  2193. cls.a1 = Article.objects.create(
  2194. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  2195. )
  2196. cls.a2 = Article.objects.create(
  2197. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  2198. )
  2199. cls.a3 = Article.objects.create(
  2200. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  2201. )
  2202. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  2203. cls.pk = (
  2204. "abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 1234567890 "
  2205. r"""-_.!~*'() ;/?:@&=+$, <>#%" {}|\^[]`"""
  2206. )
  2207. cls.m1 = ModelWithStringPrimaryKey.objects.create(string_pk=cls.pk)
  2208. content_type_pk = ContentType.objects.get_for_model(ModelWithStringPrimaryKey).pk
  2209. user_pk = cls.superuser.pk
  2210. LogEntry.objects.log_action(user_pk, content_type_pk, cls.pk, cls.pk, 2, change_message='Changed something')
  2211. def setUp(self):
  2212. self.client.force_login(self.superuser)
  2213. def test_get_history_view(self):
  2214. """
  2215. Retrieving the history for an object using urlencoded form of primary
  2216. key should work.
  2217. Refs #12349, #18550.
  2218. """
  2219. response = self.client.get(reverse('admin:admin_views_modelwithstringprimarykey_history', args=(self.pk,)))
  2220. self.assertContains(response, escape(self.pk))
  2221. self.assertContains(response, 'Changed something')
  2222. self.assertEqual(response.status_code, 200)
  2223. def test_get_change_view(self):
  2224. "Retrieving the object using urlencoded form of primary key should work"
  2225. response = self.client.get(reverse('admin:admin_views_modelwithstringprimarykey_change', args=(self.pk,)))
  2226. self.assertContains(response, escape(self.pk))
  2227. self.assertEqual(response.status_code, 200)
  2228. def test_changelist_to_changeform_link(self):
  2229. "Link to the changeform of the object in changelist should use reverse() and be quoted -- #18072"
  2230. response = self.client.get(reverse('admin:admin_views_modelwithstringprimarykey_changelist'))
  2231. # this URL now comes through reverse(), thus url quoting and iri_to_uri encoding
  2232. pk_final_url = escape(iri_to_uri(quote(self.pk)))
  2233. change_url = reverse(
  2234. 'admin:admin_views_modelwithstringprimarykey_change', args=('__fk__',)
  2235. ).replace('__fk__', pk_final_url)
  2236. should_contain = '<th class="field-__str__"><a href="%s">%s</a></th>' % (change_url, escape(self.pk))
  2237. self.assertContains(response, should_contain)
  2238. def test_recentactions_link(self):
  2239. "The link from the recent actions list referring to the changeform of the object should be quoted"
  2240. response = self.client.get(reverse('admin:index'))
  2241. link = reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(self.pk),))
  2242. should_contain = """<a href="%s">%s</a>""" % (escape(link), escape(self.pk))
  2243. self.assertContains(response, should_contain)
  2244. def test_deleteconfirmation_link(self):
  2245. "The link from the delete confirmation page referring back to the changeform of the object should be quoted"
  2246. url = reverse('admin:admin_views_modelwithstringprimarykey_delete', args=(quote(self.pk),))
  2247. response = self.client.get(url)
  2248. # this URL now comes through reverse(), thus url quoting and iri_to_uri encoding
  2249. change_url = reverse(
  2250. 'admin:admin_views_modelwithstringprimarykey_change', args=('__fk__',)
  2251. ).replace('__fk__', escape(iri_to_uri(quote(self.pk))))
  2252. should_contain = '<a href="%s">%s</a>' % (change_url, escape(self.pk))
  2253. self.assertContains(response, should_contain)
  2254. def test_url_conflicts_with_add(self):
  2255. "A model with a primary key that ends with add or is `add` should be visible"
  2256. add_model = ModelWithStringPrimaryKey.objects.create(pk="i have something to add")
  2257. add_model.save()
  2258. response = self.client.get(
  2259. reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(add_model.pk),))
  2260. )
  2261. should_contain = """<h1>Change model with string primary key</h1>"""
  2262. self.assertContains(response, should_contain)
  2263. add_model2 = ModelWithStringPrimaryKey.objects.create(pk="add")
  2264. add_url = reverse('admin:admin_views_modelwithstringprimarykey_add')
  2265. change_url = reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(add_model2.pk),))
  2266. self.assertNotEqual(add_url, change_url)
  2267. def test_url_conflicts_with_delete(self):
  2268. "A model with a primary key that ends with delete should be visible"
  2269. delete_model = ModelWithStringPrimaryKey(pk="delete")
  2270. delete_model.save()
  2271. response = self.client.get(
  2272. reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(delete_model.pk),))
  2273. )
  2274. should_contain = """<h1>Change model with string primary key</h1>"""
  2275. self.assertContains(response, should_contain)
  2276. def test_url_conflicts_with_history(self):
  2277. "A model with a primary key that ends with history should be visible"
  2278. history_model = ModelWithStringPrimaryKey(pk="history")
  2279. history_model.save()
  2280. response = self.client.get(
  2281. reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(history_model.pk),))
  2282. )
  2283. should_contain = """<h1>Change model with string primary key</h1>"""
  2284. self.assertContains(response, should_contain)
  2285. def test_shortcut_view_with_escaping(self):
  2286. "'View on site should' work properly with char fields"
  2287. model = ModelWithStringPrimaryKey(pk='abc_123')
  2288. model.save()
  2289. response = self.client.get(
  2290. reverse('admin:admin_views_modelwithstringprimarykey_change', args=(quote(model.pk),))
  2291. )
  2292. should_contain = '/%s/" class="viewsitelink">' % model.pk
  2293. self.assertContains(response, should_contain)
  2294. def test_change_view_history_link(self):
  2295. """Object history button link should work and contain the pk value quoted."""
  2296. url = reverse(
  2297. 'admin:%s_modelwithstringprimarykey_change' % ModelWithStringPrimaryKey._meta.app_label,
  2298. args=(quote(self.pk),)
  2299. )
  2300. response = self.client.get(url)
  2301. self.assertEqual(response.status_code, 200)
  2302. expected_link = reverse(
  2303. 'admin:%s_modelwithstringprimarykey_history' % ModelWithStringPrimaryKey._meta.app_label,
  2304. args=(quote(self.pk),)
  2305. )
  2306. self.assertContains(response, '<a href="%s" class="historylink"' % escape(expected_link))
  2307. def test_redirect_on_add_view_continue_button(self):
  2308. """As soon as an object is added using "Save and continue editing"
  2309. button, the user should be redirected to the object's change_view.
  2310. In case primary key is a string containing some special characters
  2311. like slash or underscore, these characters must be escaped (see #22266)
  2312. """
  2313. response = self.client.post(
  2314. reverse('admin:admin_views_modelwithstringprimarykey_add'),
  2315. {
  2316. 'string_pk': '123/history',
  2317. "_continue": "1", # Save and continue editing
  2318. }
  2319. )
  2320. self.assertEqual(response.status_code, 302) # temporary redirect
  2321. self.assertIn('/123_2Fhistory/', response['location']) # PK is quoted
  2322. @override_settings(ROOT_URLCONF='admin_views.urls')
  2323. class SecureViewTests(TestCase):
  2324. """
  2325. Test behavior of a view protected by the staff_member_required decorator.
  2326. """
  2327. def test_secure_view_shows_login_if_not_logged_in(self):
  2328. secure_url = reverse('secure_view')
  2329. response = self.client.get(secure_url)
  2330. self.assertRedirects(response, '%s?next=%s' % (reverse('admin:login'), secure_url))
  2331. response = self.client.get(secure_url, follow=True)
  2332. self.assertTemplateUsed(response, 'admin/login.html')
  2333. self.assertEqual(response.context[REDIRECT_FIELD_NAME], secure_url)
  2334. def test_staff_member_required_decorator_works_with_argument(self):
  2335. """
  2336. Staff_member_required decorator works with an argument
  2337. (redirect_field_name).
  2338. """
  2339. secure_url = '/test_admin/admin/secure-view2/'
  2340. response = self.client.get(secure_url)
  2341. self.assertRedirects(response, '%s?myfield=%s' % (reverse('admin:login'), secure_url))
  2342. @override_settings(ROOT_URLCONF='admin_views.urls')
  2343. class AdminViewUnicodeTest(TestCase):
  2344. @classmethod
  2345. def setUpTestData(cls):
  2346. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2347. cls.b1 = Book.objects.create(name='Lærdommer')
  2348. cls.p1 = Promo.objects.create(name='<Promo for Lærdommer>', book=cls.b1)
  2349. cls.chap1 = Chapter.objects.create(
  2350. title='Norske bostaver æøå skaper problemer', content='<p>Svært frustrerende med UnicodeDecodeErro</p>',
  2351. book=cls.b1
  2352. )
  2353. cls.chap2 = Chapter.objects.create(
  2354. title='Kjærlighet', content='<p>La kjærligheten til de lidende seire.</p>', book=cls.b1)
  2355. cls.chap3 = Chapter.objects.create(title='Kjærlighet', content='<p>Noe innhold</p>', book=cls.b1)
  2356. cls.chap4 = ChapterXtra1.objects.create(chap=cls.chap1, xtra='<Xtra(1) Norske bostaver æøå skaper problemer>')
  2357. cls.chap5 = ChapterXtra1.objects.create(chap=cls.chap2, xtra='<Xtra(1) Kjærlighet>')
  2358. cls.chap6 = ChapterXtra1.objects.create(chap=cls.chap3, xtra='<Xtra(1) Kjærlighet>')
  2359. cls.chap7 = ChapterXtra2.objects.create(chap=cls.chap1, xtra='<Xtra(2) Norske bostaver æøå skaper problemer>')
  2360. cls.chap8 = ChapterXtra2.objects.create(chap=cls.chap2, xtra='<Xtra(2) Kjærlighet>')
  2361. cls.chap9 = ChapterXtra2.objects.create(chap=cls.chap3, xtra='<Xtra(2) Kjærlighet>')
  2362. def setUp(self):
  2363. self.client.force_login(self.superuser)
  2364. def test_unicode_edit(self):
  2365. """
  2366. A test to ensure that POST on edit_view handles non-ASCII characters.
  2367. """
  2368. post_data = {
  2369. "name": "Test lærdommer",
  2370. # inline data
  2371. "chapter_set-TOTAL_FORMS": "6",
  2372. "chapter_set-INITIAL_FORMS": "3",
  2373. "chapter_set-MAX_NUM_FORMS": "0",
  2374. "chapter_set-0-id": self.chap1.pk,
  2375. "chapter_set-0-title": "Norske bostaver æøå skaper problemer",
  2376. "chapter_set-0-content": "&lt;p&gt;Svært frustrerende med UnicodeDecodeError&lt;/p&gt;",
  2377. "chapter_set-1-id": self.chap2.id,
  2378. "chapter_set-1-title": "Kjærlighet.",
  2379. "chapter_set-1-content": "&lt;p&gt;La kjærligheten til de lidende seire.&lt;/p&gt;",
  2380. "chapter_set-2-id": self.chap3.id,
  2381. "chapter_set-2-title": "Need a title.",
  2382. "chapter_set-2-content": "&lt;p&gt;Newest content&lt;/p&gt;",
  2383. "chapter_set-3-id": "",
  2384. "chapter_set-3-title": "",
  2385. "chapter_set-3-content": "",
  2386. "chapter_set-4-id": "",
  2387. "chapter_set-4-title": "",
  2388. "chapter_set-4-content": "",
  2389. "chapter_set-5-id": "",
  2390. "chapter_set-5-title": "",
  2391. "chapter_set-5-content": "",
  2392. }
  2393. response = self.client.post(reverse('admin:admin_views_book_change', args=(self.b1.pk,)), post_data)
  2394. self.assertEqual(response.status_code, 302) # redirect somewhere
  2395. def test_unicode_delete(self):
  2396. """
  2397. The delete_view handles non-ASCII characters
  2398. """
  2399. delete_dict = {'post': 'yes'}
  2400. delete_url = reverse('admin:admin_views_book_delete', args=(self.b1.pk,))
  2401. response = self.client.get(delete_url)
  2402. self.assertEqual(response.status_code, 200)
  2403. response = self.client.post(delete_url, delete_dict)
  2404. self.assertRedirects(response, reverse('admin:admin_views_book_changelist'))
  2405. @override_settings(ROOT_URLCONF='admin_views.urls')
  2406. class AdminViewListEditable(TestCase):
  2407. @classmethod
  2408. def setUpTestData(cls):
  2409. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2410. cls.s1 = Section.objects.create(name='Test section')
  2411. cls.a1 = Article.objects.create(
  2412. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  2413. )
  2414. cls.a2 = Article.objects.create(
  2415. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  2416. )
  2417. cls.a3 = Article.objects.create(
  2418. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  2419. )
  2420. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  2421. cls.per1 = Person.objects.create(name='John Mauchly', gender=1, alive=True)
  2422. cls.per2 = Person.objects.create(name='Grace Hopper', gender=1, alive=False)
  2423. cls.per3 = Person.objects.create(name='Guido van Rossum', gender=1, alive=True)
  2424. def setUp(self):
  2425. self.client.force_login(self.superuser)
  2426. def test_inheritance(self):
  2427. Podcast.objects.create(name="This Week in Django", release_date=datetime.date.today())
  2428. response = self.client.get(reverse('admin:admin_views_podcast_changelist'))
  2429. self.assertEqual(response.status_code, 200)
  2430. def test_inheritance_2(self):
  2431. Vodcast.objects.create(name="This Week in Django", released=True)
  2432. response = self.client.get(reverse('admin:admin_views_vodcast_changelist'))
  2433. self.assertEqual(response.status_code, 200)
  2434. def test_custom_pk(self):
  2435. Language.objects.create(iso='en', name='English', english_name='English')
  2436. response = self.client.get(reverse('admin:admin_views_language_changelist'))
  2437. self.assertEqual(response.status_code, 200)
  2438. def test_changelist_input_html(self):
  2439. response = self.client.get(reverse('admin:admin_views_person_changelist'))
  2440. # 2 inputs per object(the field and the hidden id field) = 6
  2441. # 4 management hidden fields = 4
  2442. # 4 action inputs (3 regular checkboxes, 1 checkbox to select all)
  2443. # main form submit button = 1
  2444. # search field and search submit button = 2
  2445. # CSRF field = 1
  2446. # field to track 'select all' across paginated views = 1
  2447. # 6 + 4 + 4 + 1 + 2 + 1 + 1 = 19 inputs
  2448. self.assertContains(response, "<input", count=19)
  2449. # 1 select per object = 3 selects
  2450. self.assertContains(response, "<select", count=4)
  2451. def test_post_messages(self):
  2452. # Ticket 12707: Saving inline editable should not show admin
  2453. # action warnings
  2454. data = {
  2455. "form-TOTAL_FORMS": "3",
  2456. "form-INITIAL_FORMS": "3",
  2457. "form-MAX_NUM_FORMS": "0",
  2458. "form-0-gender": "1",
  2459. "form-0-id": "%s" % self.per1.pk,
  2460. "form-1-gender": "2",
  2461. "form-1-id": "%s" % self.per2.pk,
  2462. "form-2-alive": "checked",
  2463. "form-2-gender": "1",
  2464. "form-2-id": "%s" % self.per3.pk,
  2465. "_save": "Save",
  2466. }
  2467. response = self.client.post(reverse('admin:admin_views_person_changelist'),
  2468. data, follow=True)
  2469. self.assertEqual(len(response.context['messages']), 1)
  2470. def test_post_submission(self):
  2471. data = {
  2472. "form-TOTAL_FORMS": "3",
  2473. "form-INITIAL_FORMS": "3",
  2474. "form-MAX_NUM_FORMS": "0",
  2475. "form-0-gender": "1",
  2476. "form-0-id": "%s" % self.per1.pk,
  2477. "form-1-gender": "2",
  2478. "form-1-id": "%s" % self.per2.pk,
  2479. "form-2-alive": "checked",
  2480. "form-2-gender": "1",
  2481. "form-2-id": "%s" % self.per3.pk,
  2482. "_save": "Save",
  2483. }
  2484. self.client.post(reverse('admin:admin_views_person_changelist'), data)
  2485. self.assertIs(Person.objects.get(name="John Mauchly").alive, False)
  2486. self.assertEqual(Person.objects.get(name="Grace Hopper").gender, 2)
  2487. # test a filtered page
  2488. data = {
  2489. "form-TOTAL_FORMS": "2",
  2490. "form-INITIAL_FORMS": "2",
  2491. "form-MAX_NUM_FORMS": "0",
  2492. "form-0-id": "%s" % self.per1.pk,
  2493. "form-0-gender": "1",
  2494. "form-0-alive": "checked",
  2495. "form-1-id": "%s" % self.per3.pk,
  2496. "form-1-gender": "1",
  2497. "form-1-alive": "checked",
  2498. "_save": "Save",
  2499. }
  2500. self.client.post(reverse('admin:admin_views_person_changelist') + '?gender__exact=1', data)
  2501. self.assertIs(Person.objects.get(name="John Mauchly").alive, True)
  2502. # test a searched page
  2503. data = {
  2504. "form-TOTAL_FORMS": "1",
  2505. "form-INITIAL_FORMS": "1",
  2506. "form-MAX_NUM_FORMS": "0",
  2507. "form-0-id": "%s" % self.per1.pk,
  2508. "form-0-gender": "1",
  2509. "_save": "Save",
  2510. }
  2511. self.client.post(reverse('admin:admin_views_person_changelist') + '?q=john', data)
  2512. self.assertIs(Person.objects.get(name="John Mauchly").alive, False)
  2513. def test_non_field_errors(self):
  2514. """
  2515. Non-field errors are displayed for each of the forms in the
  2516. changelist's formset.
  2517. """
  2518. fd1 = FoodDelivery.objects.create(reference='123', driver='bill', restaurant='thai')
  2519. fd2 = FoodDelivery.objects.create(reference='456', driver='bill', restaurant='india')
  2520. fd3 = FoodDelivery.objects.create(reference='789', driver='bill', restaurant='pizza')
  2521. data = {
  2522. "form-TOTAL_FORMS": "3",
  2523. "form-INITIAL_FORMS": "3",
  2524. "form-MAX_NUM_FORMS": "0",
  2525. "form-0-id": str(fd1.id),
  2526. "form-0-reference": "123",
  2527. "form-0-driver": "bill",
  2528. "form-0-restaurant": "thai",
  2529. # Same data as above: Forbidden because of unique_together!
  2530. "form-1-id": str(fd2.id),
  2531. "form-1-reference": "456",
  2532. "form-1-driver": "bill",
  2533. "form-1-restaurant": "thai",
  2534. "form-2-id": str(fd3.id),
  2535. "form-2-reference": "789",
  2536. "form-2-driver": "bill",
  2537. "form-2-restaurant": "pizza",
  2538. "_save": "Save",
  2539. }
  2540. response = self.client.post(reverse('admin:admin_views_fooddelivery_changelist'), data)
  2541. self.assertContains(
  2542. response,
  2543. '<tr><td colspan="4"><ul class="errorlist nonfield"><li>Food delivery '
  2544. 'with this Driver and Restaurant already exists.</li></ul></td></tr>',
  2545. 1,
  2546. html=True
  2547. )
  2548. data = {
  2549. "form-TOTAL_FORMS": "3",
  2550. "form-INITIAL_FORMS": "3",
  2551. "form-MAX_NUM_FORMS": "0",
  2552. "form-0-id": str(fd1.id),
  2553. "form-0-reference": "123",
  2554. "form-0-driver": "bill",
  2555. "form-0-restaurant": "thai",
  2556. # Same data as above: Forbidden because of unique_together!
  2557. "form-1-id": str(fd2.id),
  2558. "form-1-reference": "456",
  2559. "form-1-driver": "bill",
  2560. "form-1-restaurant": "thai",
  2561. # Same data also.
  2562. "form-2-id": str(fd3.id),
  2563. "form-2-reference": "789",
  2564. "form-2-driver": "bill",
  2565. "form-2-restaurant": "thai",
  2566. "_save": "Save",
  2567. }
  2568. response = self.client.post(reverse('admin:admin_views_fooddelivery_changelist'), data)
  2569. self.assertContains(
  2570. response,
  2571. '<tr><td colspan="4"><ul class="errorlist nonfield"><li>Food delivery '
  2572. 'with this Driver and Restaurant already exists.</li></ul></td></tr>',
  2573. 2,
  2574. html=True
  2575. )
  2576. def test_non_form_errors(self):
  2577. # test if non-form errors are handled; ticket #12716
  2578. data = {
  2579. "form-TOTAL_FORMS": "1",
  2580. "form-INITIAL_FORMS": "1",
  2581. "form-MAX_NUM_FORMS": "0",
  2582. "form-0-id": "%s" % self.per2.pk,
  2583. "form-0-alive": "1",
  2584. "form-0-gender": "2",
  2585. # The form processing understands this as a list_editable "Save"
  2586. # and not an action "Go".
  2587. "_save": "Save",
  2588. }
  2589. response = self.client.post(reverse('admin:admin_views_person_changelist'), data)
  2590. self.assertContains(response, "Grace is not a Zombie")
  2591. def test_non_form_errors_is_errorlist(self):
  2592. # test if non-form errors are correctly handled; ticket #12878
  2593. data = {
  2594. "form-TOTAL_FORMS": "1",
  2595. "form-INITIAL_FORMS": "1",
  2596. "form-MAX_NUM_FORMS": "0",
  2597. "form-0-id": "%s" % self.per2.pk,
  2598. "form-0-alive": "1",
  2599. "form-0-gender": "2",
  2600. "_save": "Save",
  2601. }
  2602. response = self.client.post(reverse('admin:admin_views_person_changelist'), data)
  2603. non_form_errors = response.context['cl'].formset.non_form_errors()
  2604. self.assertIsInstance(non_form_errors, ErrorList)
  2605. self.assertEqual(str(non_form_errors), str(ErrorList(["Grace is not a Zombie"])))
  2606. def test_list_editable_ordering(self):
  2607. collector = Collector.objects.create(id=1, name="Frederick Clegg")
  2608. Category.objects.create(id=1, order=1, collector=collector)
  2609. Category.objects.create(id=2, order=2, collector=collector)
  2610. Category.objects.create(id=3, order=0, collector=collector)
  2611. Category.objects.create(id=4, order=0, collector=collector)
  2612. # NB: The order values must be changed so that the items are reordered.
  2613. data = {
  2614. "form-TOTAL_FORMS": "4",
  2615. "form-INITIAL_FORMS": "4",
  2616. "form-MAX_NUM_FORMS": "0",
  2617. "form-0-order": "14",
  2618. "form-0-id": "1",
  2619. "form-0-collector": "1",
  2620. "form-1-order": "13",
  2621. "form-1-id": "2",
  2622. "form-1-collector": "1",
  2623. "form-2-order": "1",
  2624. "form-2-id": "3",
  2625. "form-2-collector": "1",
  2626. "form-3-order": "0",
  2627. "form-3-id": "4",
  2628. "form-3-collector": "1",
  2629. # The form processing understands this as a list_editable "Save"
  2630. # and not an action "Go".
  2631. "_save": "Save",
  2632. }
  2633. response = self.client.post(reverse('admin:admin_views_category_changelist'), data)
  2634. # Successful post will redirect
  2635. self.assertEqual(response.status_code, 302)
  2636. # The order values have been applied to the right objects
  2637. self.assertEqual(Category.objects.get(id=1).order, 14)
  2638. self.assertEqual(Category.objects.get(id=2).order, 13)
  2639. self.assertEqual(Category.objects.get(id=3).order, 1)
  2640. self.assertEqual(Category.objects.get(id=4).order, 0)
  2641. def test_list_editable_pagination(self):
  2642. """
  2643. Pagination works for list_editable items.
  2644. """
  2645. UnorderedObject.objects.create(id=1, name='Unordered object #1')
  2646. UnorderedObject.objects.create(id=2, name='Unordered object #2')
  2647. UnorderedObject.objects.create(id=3, name='Unordered object #3')
  2648. response = self.client.get(reverse('admin:admin_views_unorderedobject_changelist'))
  2649. self.assertContains(response, 'Unordered object #3')
  2650. self.assertContains(response, 'Unordered object #2')
  2651. self.assertNotContains(response, 'Unordered object #1')
  2652. response = self.client.get(reverse('admin:admin_views_unorderedobject_changelist') + '?p=1')
  2653. self.assertNotContains(response, 'Unordered object #3')
  2654. self.assertNotContains(response, 'Unordered object #2')
  2655. self.assertContains(response, 'Unordered object #1')
  2656. def test_list_editable_action_submit(self):
  2657. # List editable changes should not be executed if the action "Go" button is
  2658. # used to submit the form.
  2659. data = {
  2660. "form-TOTAL_FORMS": "3",
  2661. "form-INITIAL_FORMS": "3",
  2662. "form-MAX_NUM_FORMS": "0",
  2663. "form-0-gender": "1",
  2664. "form-0-id": "1",
  2665. "form-1-gender": "2",
  2666. "form-1-id": "2",
  2667. "form-2-alive": "checked",
  2668. "form-2-gender": "1",
  2669. "form-2-id": "3",
  2670. "index": "0",
  2671. "_selected_action": ['3'],
  2672. "action": ['', 'delete_selected'],
  2673. }
  2674. self.client.post(reverse('admin:admin_views_person_changelist'), data)
  2675. self.assertIs(Person.objects.get(name="John Mauchly").alive, True)
  2676. self.assertEqual(Person.objects.get(name="Grace Hopper").gender, 1)
  2677. def test_list_editable_action_choices(self):
  2678. # List editable changes should be executed if the "Save" button is
  2679. # used to submit the form - any action choices should be ignored.
  2680. data = {
  2681. "form-TOTAL_FORMS": "3",
  2682. "form-INITIAL_FORMS": "3",
  2683. "form-MAX_NUM_FORMS": "0",
  2684. "form-0-gender": "1",
  2685. "form-0-id": "%s" % self.per1.pk,
  2686. "form-1-gender": "2",
  2687. "form-1-id": "%s" % self.per2.pk,
  2688. "form-2-alive": "checked",
  2689. "form-2-gender": "1",
  2690. "form-2-id": "%s" % self.per3.pk,
  2691. "_save": "Save",
  2692. "_selected_action": ['1'],
  2693. "action": ['', 'delete_selected'],
  2694. }
  2695. self.client.post(reverse('admin:admin_views_person_changelist'), data)
  2696. self.assertIs(Person.objects.get(name="John Mauchly").alive, False)
  2697. self.assertEqual(Person.objects.get(name="Grace Hopper").gender, 2)
  2698. def test_list_editable_popup(self):
  2699. """
  2700. Fields should not be list-editable in popups.
  2701. """
  2702. response = self.client.get(reverse('admin:admin_views_person_changelist'))
  2703. self.assertNotEqual(response.context['cl'].list_editable, ())
  2704. response = self.client.get(reverse('admin:admin_views_person_changelist') + '?%s' % IS_POPUP_VAR)
  2705. self.assertEqual(response.context['cl'].list_editable, ())
  2706. def test_pk_hidden_fields(self):
  2707. """
  2708. hidden pk fields aren't displayed in the table body and their
  2709. corresponding human-readable value is displayed instead. The hidden pk
  2710. fields are displayed but separately (not in the table) and only once.
  2711. """
  2712. story1 = Story.objects.create(title='The adventures of Guido', content='Once upon a time in Djangoland...')
  2713. story2 = Story.objects.create(
  2714. title='Crouching Tiger, Hidden Python',
  2715. content='The Python was sneaking into...',
  2716. )
  2717. response = self.client.get(reverse('admin:admin_views_story_changelist'))
  2718. # Only one hidden field, in a separate place than the table.
  2719. self.assertContains(response, 'id="id_form-0-id"', 1)
  2720. self.assertContains(response, 'id="id_form-1-id"', 1)
  2721. self.assertContains(
  2722. response,
  2723. '<div class="hiddenfields">\n'
  2724. '<input type="hidden" name="form-0-id" value="%d" id="id_form-0-id">'
  2725. '<input type="hidden" name="form-1-id" value="%d" id="id_form-1-id">\n</div>'
  2726. % (story2.id, story1.id),
  2727. html=True
  2728. )
  2729. self.assertContains(response, '<td class="field-id">%d</td>' % story1.id, 1)
  2730. self.assertContains(response, '<td class="field-id">%d</td>' % story2.id, 1)
  2731. def test_pk_hidden_fields_with_list_display_links(self):
  2732. """ Similarly as test_pk_hidden_fields, but when the hidden pk fields are
  2733. referenced in list_display_links.
  2734. Refs #12475.
  2735. """
  2736. story1 = OtherStory.objects.create(
  2737. title='The adventures of Guido',
  2738. content='Once upon a time in Djangoland...',
  2739. )
  2740. story2 = OtherStory.objects.create(
  2741. title='Crouching Tiger, Hidden Python',
  2742. content='The Python was sneaking into...',
  2743. )
  2744. link1 = reverse('admin:admin_views_otherstory_change', args=(story1.pk,))
  2745. link2 = reverse('admin:admin_views_otherstory_change', args=(story2.pk,))
  2746. response = self.client.get(reverse('admin:admin_views_otherstory_changelist'))
  2747. # Only one hidden field, in a separate place than the table.
  2748. self.assertContains(response, 'id="id_form-0-id"', 1)
  2749. self.assertContains(response, 'id="id_form-1-id"', 1)
  2750. self.assertContains(
  2751. response,
  2752. '<div class="hiddenfields">\n'
  2753. '<input type="hidden" name="form-0-id" value="%d" id="id_form-0-id">'
  2754. '<input type="hidden" name="form-1-id" value="%d" id="id_form-1-id">\n</div>'
  2755. % (story2.id, story1.id),
  2756. html=True
  2757. )
  2758. self.assertContains(response, '<th class="field-id"><a href="%s">%d</a></th>' % (link1, story1.id), 1)
  2759. self.assertContains(response, '<th class="field-id"><a href="%s">%d</a></th>' % (link2, story2.id), 1)
  2760. @override_settings(ROOT_URLCONF='admin_views.urls')
  2761. class AdminSearchTest(TestCase):
  2762. @classmethod
  2763. def setUpTestData(cls):
  2764. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2765. cls.joepublicuser = User.objects.create_user(username='joepublic', password='secret')
  2766. cls.s1 = Section.objects.create(name='Test section')
  2767. cls.a1 = Article.objects.create(
  2768. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  2769. )
  2770. cls.a2 = Article.objects.create(
  2771. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  2772. )
  2773. cls.a3 = Article.objects.create(
  2774. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  2775. )
  2776. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  2777. cls.per1 = Person.objects.create(name='John Mauchly', gender=1, alive=True)
  2778. cls.per2 = Person.objects.create(name='Grace Hopper', gender=1, alive=False)
  2779. cls.per3 = Person.objects.create(name='Guido van Rossum', gender=1, alive=True)
  2780. cls.t1 = Recommender.objects.create()
  2781. cls.t2 = Recommendation.objects.create(the_recommender=cls.t1)
  2782. cls.t3 = Recommender.objects.create()
  2783. cls.t4 = Recommendation.objects.create(the_recommender=cls.t3)
  2784. cls.tt1 = TitleTranslation.objects.create(title=cls.t1, text='Bar')
  2785. cls.tt2 = TitleTranslation.objects.create(title=cls.t2, text='Foo')
  2786. cls.tt3 = TitleTranslation.objects.create(title=cls.t3, text='Few')
  2787. cls.tt4 = TitleTranslation.objects.create(title=cls.t4, text='Bas')
  2788. def setUp(self):
  2789. self.client.force_login(self.superuser)
  2790. def test_search_on_sibling_models(self):
  2791. "A search that mentions sibling models"
  2792. response = self.client.get(reverse('admin:admin_views_recommendation_changelist') + '?q=bar')
  2793. # confirm the search returned 1 object
  2794. self.assertContains(response, "\n1 recommendation\n")
  2795. def test_with_fk_to_field(self):
  2796. """
  2797. The to_field GET parameter is preserved when a search is performed.
  2798. Refs #10918.
  2799. """
  2800. response = self.client.get(reverse('admin:auth_user_changelist') + '?q=joe&%s=id' % TO_FIELD_VAR)
  2801. self.assertContains(response, "\n1 user\n")
  2802. self.assertContains(response, '<input type="hidden" name="%s" value="id">' % TO_FIELD_VAR, html=True)
  2803. def test_exact_matches(self):
  2804. response = self.client.get(reverse('admin:admin_views_recommendation_changelist') + '?q=bar')
  2805. # confirm the search returned one object
  2806. self.assertContains(response, "\n1 recommendation\n")
  2807. response = self.client.get(reverse('admin:admin_views_recommendation_changelist') + '?q=ba')
  2808. # confirm the search returned zero objects
  2809. self.assertContains(response, "\n0 recommendations\n")
  2810. def test_beginning_matches(self):
  2811. response = self.client.get(reverse('admin:admin_views_person_changelist') + '?q=Gui')
  2812. # confirm the search returned one object
  2813. self.assertContains(response, "\n1 person\n")
  2814. self.assertContains(response, "Guido")
  2815. response = self.client.get(reverse('admin:admin_views_person_changelist') + '?q=uido')
  2816. # confirm the search returned zero objects
  2817. self.assertContains(response, "\n0 persons\n")
  2818. self.assertNotContains(response, "Guido")
  2819. def test_pluggable_search(self):
  2820. PluggableSearchPerson.objects.create(name="Bob", age=10)
  2821. PluggableSearchPerson.objects.create(name="Amy", age=20)
  2822. response = self.client.get(reverse('admin:admin_views_pluggablesearchperson_changelist') + '?q=Bob')
  2823. # confirm the search returned one object
  2824. self.assertContains(response, "\n1 pluggable search person\n")
  2825. self.assertContains(response, "Bob")
  2826. response = self.client.get(reverse('admin:admin_views_pluggablesearchperson_changelist') + '?q=20')
  2827. # confirm the search returned one object
  2828. self.assertContains(response, "\n1 pluggable search person\n")
  2829. self.assertContains(response, "Amy")
  2830. def test_reset_link(self):
  2831. """
  2832. Test presence of reset link in search bar ("1 result (_x total_)").
  2833. """
  2834. # 1 query for session + 1 for fetching user
  2835. # + 1 for filtered result + 1 for filtered count
  2836. # + 1 for total count
  2837. with self.assertNumQueries(5):
  2838. response = self.client.get(reverse('admin:admin_views_person_changelist') + '?q=Gui')
  2839. self.assertContains(
  2840. response,
  2841. """<span class="small quiet">1 result (<a href="?">3 total</a>)</span>""",
  2842. html=True
  2843. )
  2844. def test_no_total_count(self):
  2845. """
  2846. #8408 -- "Show all" should be displayed instead of the total count if
  2847. ModelAdmin.show_full_result_count is False.
  2848. """
  2849. # 1 query for session + 1 for fetching user
  2850. # + 1 for filtered result + 1 for filtered count
  2851. with self.assertNumQueries(4):
  2852. response = self.client.get(reverse('admin:admin_views_recommendation_changelist') + '?q=bar')
  2853. self.assertContains(
  2854. response,
  2855. """<span class="small quiet">1 result (<a href="?">Show all</a>)</span>""",
  2856. html=True
  2857. )
  2858. self.assertTrue(response.context['cl'].show_admin_actions)
  2859. @override_settings(ROOT_URLCONF='admin_views.urls')
  2860. class AdminInheritedInlinesTest(TestCase):
  2861. @classmethod
  2862. def setUpTestData(cls):
  2863. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2864. def setUp(self):
  2865. self.client.force_login(self.superuser)
  2866. def test_inline(self):
  2867. """
  2868. Inline models which inherit from a common parent are correctly handled.
  2869. """
  2870. foo_user = "foo username"
  2871. bar_user = "bar username"
  2872. name_re = re.compile(b'name="(.*?)"')
  2873. # test the add case
  2874. response = self.client.get(reverse('admin:admin_views_persona_add'))
  2875. names = name_re.findall(response.content)
  2876. # make sure we have no duplicate HTML names
  2877. self.assertEqual(len(names), len(set(names)))
  2878. # test the add case
  2879. post_data = {
  2880. "name": "Test Name",
  2881. # inline data
  2882. "accounts-TOTAL_FORMS": "1",
  2883. "accounts-INITIAL_FORMS": "0",
  2884. "accounts-MAX_NUM_FORMS": "0",
  2885. "accounts-0-username": foo_user,
  2886. "accounts-2-TOTAL_FORMS": "1",
  2887. "accounts-2-INITIAL_FORMS": "0",
  2888. "accounts-2-MAX_NUM_FORMS": "0",
  2889. "accounts-2-0-username": bar_user,
  2890. }
  2891. response = self.client.post(reverse('admin:admin_views_persona_add'), post_data)
  2892. self.assertEqual(response.status_code, 302) # redirect somewhere
  2893. self.assertEqual(Persona.objects.count(), 1)
  2894. self.assertEqual(FooAccount.objects.count(), 1)
  2895. self.assertEqual(BarAccount.objects.count(), 1)
  2896. self.assertEqual(FooAccount.objects.all()[0].username, foo_user)
  2897. self.assertEqual(BarAccount.objects.all()[0].username, bar_user)
  2898. self.assertEqual(Persona.objects.all()[0].accounts.count(), 2)
  2899. persona_id = Persona.objects.all()[0].id
  2900. foo_id = FooAccount.objects.all()[0].id
  2901. bar_id = BarAccount.objects.all()[0].id
  2902. # test the edit case
  2903. response = self.client.get(reverse('admin:admin_views_persona_change', args=(persona_id,)))
  2904. names = name_re.findall(response.content)
  2905. # make sure we have no duplicate HTML names
  2906. self.assertEqual(len(names), len(set(names)))
  2907. post_data = {
  2908. "name": "Test Name",
  2909. "accounts-TOTAL_FORMS": "2",
  2910. "accounts-INITIAL_FORMS": "1",
  2911. "accounts-MAX_NUM_FORMS": "0",
  2912. "accounts-0-username": "%s-1" % foo_user,
  2913. "accounts-0-account_ptr": str(foo_id),
  2914. "accounts-0-persona": str(persona_id),
  2915. "accounts-2-TOTAL_FORMS": "2",
  2916. "accounts-2-INITIAL_FORMS": "1",
  2917. "accounts-2-MAX_NUM_FORMS": "0",
  2918. "accounts-2-0-username": "%s-1" % bar_user,
  2919. "accounts-2-0-account_ptr": str(bar_id),
  2920. "accounts-2-0-persona": str(persona_id),
  2921. }
  2922. response = self.client.post(reverse('admin:admin_views_persona_change', args=(persona_id,)), post_data)
  2923. self.assertEqual(response.status_code, 302)
  2924. self.assertEqual(Persona.objects.count(), 1)
  2925. self.assertEqual(FooAccount.objects.count(), 1)
  2926. self.assertEqual(BarAccount.objects.count(), 1)
  2927. self.assertEqual(FooAccount.objects.all()[0].username, "%s-1" % foo_user)
  2928. self.assertEqual(BarAccount.objects.all()[0].username, "%s-1" % bar_user)
  2929. self.assertEqual(Persona.objects.all()[0].accounts.count(), 2)
  2930. @override_settings(ROOT_URLCONF='admin_views.urls')
  2931. class TestCustomChangeList(TestCase):
  2932. @classmethod
  2933. def setUpTestData(cls):
  2934. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2935. def setUp(self):
  2936. self.client.force_login(self.superuser)
  2937. def test_custom_changelist(self):
  2938. """
  2939. Validate that a custom ChangeList class can be used (#9749)
  2940. """
  2941. # Insert some data
  2942. post_data = {"name": "First Gadget"}
  2943. response = self.client.post(reverse('admin:admin_views_gadget_add'), post_data)
  2944. self.assertEqual(response.status_code, 302) # redirect somewhere
  2945. # Hit the page once to get messages out of the queue message list
  2946. response = self.client.get(reverse('admin:admin_views_gadget_changelist'))
  2947. # Data is still not visible on the page
  2948. response = self.client.get(reverse('admin:admin_views_gadget_changelist'))
  2949. self.assertEqual(response.status_code, 200)
  2950. self.assertNotContains(response, 'First Gadget')
  2951. @override_settings(ROOT_URLCONF='admin_views.urls')
  2952. class TestInlineNotEditable(TestCase):
  2953. @classmethod
  2954. def setUpTestData(cls):
  2955. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2956. def setUp(self):
  2957. self.client.force_login(self.superuser)
  2958. def test_GET_parent_add(self):
  2959. """
  2960. InlineModelAdmin broken?
  2961. """
  2962. response = self.client.get(reverse('admin:admin_views_parent_add'))
  2963. self.assertEqual(response.status_code, 200)
  2964. @override_settings(ROOT_URLCONF='admin_views.urls')
  2965. class AdminCustomQuerysetTest(TestCase):
  2966. @classmethod
  2967. def setUpTestData(cls):
  2968. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  2969. def setUp(self):
  2970. self.client.force_login(self.superuser)
  2971. self.pks = [EmptyModel.objects.create().id for i in range(3)]
  2972. self.super_login = {
  2973. REDIRECT_FIELD_NAME: reverse('admin:index'),
  2974. 'username': 'super',
  2975. 'password': 'secret',
  2976. }
  2977. def test_changelist_view(self):
  2978. response = self.client.get(reverse('admin:admin_views_emptymodel_changelist'))
  2979. for i in self.pks:
  2980. if i > 1:
  2981. self.assertContains(response, 'Primary key = %s' % i)
  2982. else:
  2983. self.assertNotContains(response, 'Primary key = %s' % i)
  2984. def test_changelist_view_count_queries(self):
  2985. # create 2 Person objects
  2986. Person.objects.create(name='person1', gender=1)
  2987. Person.objects.create(name='person2', gender=2)
  2988. changelist_url = reverse('admin:admin_views_person_changelist')
  2989. # 5 queries are expected: 1 for the session, 1 for the user,
  2990. # 2 for the counts and 1 for the objects on the page
  2991. with self.assertNumQueries(5):
  2992. resp = self.client.get(changelist_url)
  2993. self.assertEqual(resp.context['selection_note'], '0 of 2 selected')
  2994. self.assertEqual(resp.context['selection_note_all'], 'All 2 selected')
  2995. with self.assertNumQueries(5):
  2996. extra = {'q': 'not_in_name'}
  2997. resp = self.client.get(changelist_url, extra)
  2998. self.assertEqual(resp.context['selection_note'], '0 of 0 selected')
  2999. self.assertEqual(resp.context['selection_note_all'], 'All 0 selected')
  3000. with self.assertNumQueries(5):
  3001. extra = {'q': 'person'}
  3002. resp = self.client.get(changelist_url, extra)
  3003. self.assertEqual(resp.context['selection_note'], '0 of 2 selected')
  3004. self.assertEqual(resp.context['selection_note_all'], 'All 2 selected')
  3005. with self.assertNumQueries(5):
  3006. extra = {'gender__exact': '1'}
  3007. resp = self.client.get(changelist_url, extra)
  3008. self.assertEqual(resp.context['selection_note'], '0 of 1 selected')
  3009. self.assertEqual(resp.context['selection_note_all'], '1 selected')
  3010. def test_change_view(self):
  3011. for i in self.pks:
  3012. url = reverse('admin:admin_views_emptymodel_change', args=(i,))
  3013. response = self.client.get(url, follow=True)
  3014. if i > 1:
  3015. self.assertEqual(response.status_code, 200)
  3016. else:
  3017. self.assertRedirects(response, reverse('admin:index'))
  3018. self.assertEqual(
  3019. [m.message for m in response.context['messages']],
  3020. ["""empty model with ID "1" doesn't exist. Perhaps it was deleted?"""]
  3021. )
  3022. def test_add_model_modeladmin_defer_qs(self):
  3023. # Test for #14529. defer() is used in ModelAdmin.get_queryset()
  3024. # model has __str__ method
  3025. self.assertEqual(CoverLetter.objects.count(), 0)
  3026. # Emulate model instance creation via the admin
  3027. post_data = {
  3028. "author": "Candidate, Best",
  3029. "_save": "Save",
  3030. }
  3031. response = self.client.post(reverse('admin:admin_views_coverletter_add'), post_data, follow=True)
  3032. self.assertEqual(response.status_code, 200)
  3033. self.assertEqual(CoverLetter.objects.count(), 1)
  3034. # Message should contain non-ugly model verbose name
  3035. pk = CoverLetter.objects.all()[0].pk
  3036. self.assertContains(
  3037. response,
  3038. '<li class="success">The cover letter "<a href="%s">'
  3039. 'Candidate, Best</a>" was added successfully.</li>' %
  3040. reverse('admin:admin_views_coverletter_change', args=(pk,)), html=True
  3041. )
  3042. # model has no __str__ method
  3043. self.assertEqual(ShortMessage.objects.count(), 0)
  3044. # Emulate model instance creation via the admin
  3045. post_data = {
  3046. "content": "What's this SMS thing?",
  3047. "_save": "Save",
  3048. }
  3049. response = self.client.post(reverse('admin:admin_views_shortmessage_add'), post_data, follow=True)
  3050. self.assertEqual(response.status_code, 200)
  3051. self.assertEqual(ShortMessage.objects.count(), 1)
  3052. # Message should contain non-ugly model verbose name
  3053. sm = ShortMessage.objects.all()[0]
  3054. self.assertContains(
  3055. response,
  3056. '<li class="success">The short message "<a href="%s">'
  3057. '%s</a>" was added successfully.</li>' %
  3058. (reverse('admin:admin_views_shortmessage_change', args=(sm.pk,)), sm), html=True
  3059. )
  3060. def test_add_model_modeladmin_only_qs(self):
  3061. # Test for #14529. only() is used in ModelAdmin.get_queryset()
  3062. # model has __str__ method
  3063. self.assertEqual(Telegram.objects.count(), 0)
  3064. # Emulate model instance creation via the admin
  3065. post_data = {
  3066. "title": "Urgent telegram",
  3067. "_save": "Save",
  3068. }
  3069. response = self.client.post(reverse('admin:admin_views_telegram_add'), post_data, follow=True)
  3070. self.assertEqual(response.status_code, 200)
  3071. self.assertEqual(Telegram.objects.count(), 1)
  3072. # Message should contain non-ugly model verbose name
  3073. pk = Telegram.objects.all()[0].pk
  3074. self.assertContains(
  3075. response,
  3076. '<li class="success">The telegram "<a href="%s">'
  3077. 'Urgent telegram</a>" was added successfully.</li>' %
  3078. reverse('admin:admin_views_telegram_change', args=(pk,)), html=True
  3079. )
  3080. # model has no __str__ method
  3081. self.assertEqual(Paper.objects.count(), 0)
  3082. # Emulate model instance creation via the admin
  3083. post_data = {
  3084. "title": "My Modified Paper Title",
  3085. "_save": "Save",
  3086. }
  3087. response = self.client.post(reverse('admin:admin_views_paper_add'), post_data, follow=True)
  3088. self.assertEqual(response.status_code, 200)
  3089. self.assertEqual(Paper.objects.count(), 1)
  3090. # Message should contain non-ugly model verbose name
  3091. p = Paper.objects.all()[0]
  3092. self.assertContains(
  3093. response,
  3094. '<li class="success">The paper "<a href="%s">'
  3095. '%s</a>" was added successfully.</li>' %
  3096. (reverse('admin:admin_views_paper_change', args=(p.pk,)), p), html=True
  3097. )
  3098. def test_edit_model_modeladmin_defer_qs(self):
  3099. # Test for #14529. defer() is used in ModelAdmin.get_queryset()
  3100. # model has __str__ method
  3101. cl = CoverLetter.objects.create(author="John Doe")
  3102. self.assertEqual(CoverLetter.objects.count(), 1)
  3103. response = self.client.get(reverse('admin:admin_views_coverletter_change', args=(cl.pk,)))
  3104. self.assertEqual(response.status_code, 200)
  3105. # Emulate model instance edit via the admin
  3106. post_data = {
  3107. "author": "John Doe II",
  3108. "_save": "Save",
  3109. }
  3110. url = reverse('admin:admin_views_coverletter_change', args=(cl.pk,))
  3111. response = self.client.post(url, post_data, follow=True)
  3112. self.assertEqual(response.status_code, 200)
  3113. self.assertEqual(CoverLetter.objects.count(), 1)
  3114. # Message should contain non-ugly model verbose name. Instance
  3115. # representation is set by model's __str__()
  3116. self.assertContains(
  3117. response,
  3118. '<li class="success">The cover letter "<a href="%s">'
  3119. 'John Doe II</a>" was changed successfully.</li>' %
  3120. reverse('admin:admin_views_coverletter_change', args=(cl.pk,)), html=True
  3121. )
  3122. # model has no __str__ method
  3123. sm = ShortMessage.objects.create(content="This is expensive")
  3124. self.assertEqual(ShortMessage.objects.count(), 1)
  3125. response = self.client.get(reverse('admin:admin_views_shortmessage_change', args=(sm.pk,)))
  3126. self.assertEqual(response.status_code, 200)
  3127. # Emulate model instance edit via the admin
  3128. post_data = {
  3129. "content": "Too expensive",
  3130. "_save": "Save",
  3131. }
  3132. url = reverse('admin:admin_views_shortmessage_change', args=(sm.pk,))
  3133. response = self.client.post(url, post_data, follow=True)
  3134. self.assertEqual(response.status_code, 200)
  3135. self.assertEqual(ShortMessage.objects.count(), 1)
  3136. # Message should contain non-ugly model verbose name. The ugly(!)
  3137. # instance representation is set by __str__().
  3138. self.assertContains(
  3139. response,
  3140. '<li class="success">The short message "<a href="%s">'
  3141. '%s</a>" was changed successfully.</li>' %
  3142. (reverse('admin:admin_views_shortmessage_change', args=(sm.pk,)), sm), html=True
  3143. )
  3144. def test_edit_model_modeladmin_only_qs(self):
  3145. # Test for #14529. only() is used in ModelAdmin.get_queryset()
  3146. # model has __str__ method
  3147. t = Telegram.objects.create(title="Frist Telegram")
  3148. self.assertEqual(Telegram.objects.count(), 1)
  3149. response = self.client.get(reverse('admin:admin_views_telegram_change', args=(t.pk,)))
  3150. self.assertEqual(response.status_code, 200)
  3151. # Emulate model instance edit via the admin
  3152. post_data = {
  3153. "title": "Telegram without typo",
  3154. "_save": "Save",
  3155. }
  3156. response = self.client.post(reverse('admin:admin_views_telegram_change', args=(t.pk,)), post_data, follow=True)
  3157. self.assertEqual(response.status_code, 200)
  3158. self.assertEqual(Telegram.objects.count(), 1)
  3159. # Message should contain non-ugly model verbose name. The instance
  3160. # representation is set by model's __str__()
  3161. self.assertContains(
  3162. response,
  3163. '<li class="success">The telegram "<a href="%s">'
  3164. 'Telegram without typo</a>" was changed successfully.</li>' %
  3165. reverse('admin:admin_views_telegram_change', args=(t.pk,)), html=True
  3166. )
  3167. # model has no __str__ method
  3168. p = Paper.objects.create(title="My Paper Title")
  3169. self.assertEqual(Paper.objects.count(), 1)
  3170. response = self.client.get(reverse('admin:admin_views_paper_change', args=(p.pk,)))
  3171. self.assertEqual(response.status_code, 200)
  3172. # Emulate model instance edit via the admin
  3173. post_data = {
  3174. "title": "My Modified Paper Title",
  3175. "_save": "Save",
  3176. }
  3177. response = self.client.post(reverse('admin:admin_views_paper_change', args=(p.pk,)), post_data, follow=True)
  3178. self.assertEqual(response.status_code, 200)
  3179. self.assertEqual(Paper.objects.count(), 1)
  3180. # Message should contain non-ugly model verbose name. The ugly(!)
  3181. # instance representation is set by __str__().
  3182. self.assertContains(
  3183. response,
  3184. '<li class="success">The paper "<a href="%s">'
  3185. '%s</a>" was changed successfully.</li>' %
  3186. (reverse('admin:admin_views_paper_change', args=(p.pk,)), p), html=True
  3187. )
  3188. def test_history_view_custom_qs(self):
  3189. """
  3190. Custom querysets are considered for the admin history view.
  3191. """
  3192. self.client.post(reverse('admin:login'), self.super_login)
  3193. FilteredManager.objects.create(pk=1)
  3194. FilteredManager.objects.create(pk=2)
  3195. response = self.client.get(reverse('admin:admin_views_filteredmanager_changelist'))
  3196. self.assertContains(response, "PK=1")
  3197. self.assertContains(response, "PK=2")
  3198. self.assertEqual(
  3199. self.client.get(reverse('admin:admin_views_filteredmanager_history', args=(1,))).status_code, 200
  3200. )
  3201. self.assertEqual(
  3202. self.client.get(reverse('admin:admin_views_filteredmanager_history', args=(2,))).status_code, 200
  3203. )
  3204. @override_settings(ROOT_URLCONF='admin_views.urls')
  3205. class AdminInlineFileUploadTest(TestCase):
  3206. @classmethod
  3207. def setUpTestData(cls):
  3208. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  3209. def setUp(self):
  3210. self.client.force_login(self.superuser)
  3211. # Set up test Picture and Gallery.
  3212. # These must be set up here instead of in fixtures in order to allow Picture
  3213. # to use a NamedTemporaryFile.
  3214. file1 = tempfile.NamedTemporaryFile(suffix=".file1")
  3215. file1.write(b'a' * (2 ** 21))
  3216. filename = file1.name
  3217. file1.close()
  3218. self.gallery = Gallery(name="Test Gallery")
  3219. self.gallery.save()
  3220. self.picture = Picture(name="Test Picture", image=filename, gallery=self.gallery)
  3221. self.picture.save()
  3222. def test_form_has_multipart_enctype(self):
  3223. response = self.client.get(
  3224. reverse('admin:admin_views_gallery_change', args=(self.gallery.id,))
  3225. )
  3226. self.assertIs(response.context['has_file_field'], True)
  3227. self.assertContains(response, MULTIPART_ENCTYPE)
  3228. def test_inline_file_upload_edit_validation_error_post(self):
  3229. """
  3230. Inline file uploads correctly display prior data (#10002).
  3231. """
  3232. post_data = {
  3233. "name": "Test Gallery",
  3234. "pictures-TOTAL_FORMS": "2",
  3235. "pictures-INITIAL_FORMS": "1",
  3236. "pictures-MAX_NUM_FORMS": "0",
  3237. "pictures-0-id": str(self.picture.id),
  3238. "pictures-0-gallery": str(self.gallery.id),
  3239. "pictures-0-name": "Test Picture",
  3240. "pictures-0-image": "",
  3241. "pictures-1-id": "",
  3242. "pictures-1-gallery": str(self.gallery.id),
  3243. "pictures-1-name": "Test Picture 2",
  3244. "pictures-1-image": "",
  3245. }
  3246. response = self.client.post(
  3247. reverse('admin:admin_views_gallery_change', args=(self.gallery.id,)), post_data
  3248. )
  3249. self.assertContains(response, b"Currently")
  3250. @override_settings(ROOT_URLCONF='admin_views.urls')
  3251. class AdminInlineTests(TestCase):
  3252. @classmethod
  3253. def setUpTestData(cls):
  3254. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  3255. def setUp(self):
  3256. self.post_data = {
  3257. "name": "Test Name",
  3258. "widget_set-TOTAL_FORMS": "3",
  3259. "widget_set-INITIAL_FORMS": "0",
  3260. "widget_set-MAX_NUM_FORMS": "0",
  3261. "widget_set-0-id": "",
  3262. "widget_set-0-owner": "1",
  3263. "widget_set-0-name": "",
  3264. "widget_set-1-id": "",
  3265. "widget_set-1-owner": "1",
  3266. "widget_set-1-name": "",
  3267. "widget_set-2-id": "",
  3268. "widget_set-2-owner": "1",
  3269. "widget_set-2-name": "",
  3270. "doohickey_set-TOTAL_FORMS": "3",
  3271. "doohickey_set-INITIAL_FORMS": "0",
  3272. "doohickey_set-MAX_NUM_FORMS": "0",
  3273. "doohickey_set-0-owner": "1",
  3274. "doohickey_set-0-code": "",
  3275. "doohickey_set-0-name": "",
  3276. "doohickey_set-1-owner": "1",
  3277. "doohickey_set-1-code": "",
  3278. "doohickey_set-1-name": "",
  3279. "doohickey_set-2-owner": "1",
  3280. "doohickey_set-2-code": "",
  3281. "doohickey_set-2-name": "",
  3282. "grommet_set-TOTAL_FORMS": "3",
  3283. "grommet_set-INITIAL_FORMS": "0",
  3284. "grommet_set-MAX_NUM_FORMS": "0",
  3285. "grommet_set-0-code": "",
  3286. "grommet_set-0-owner": "1",
  3287. "grommet_set-0-name": "",
  3288. "grommet_set-1-code": "",
  3289. "grommet_set-1-owner": "1",
  3290. "grommet_set-1-name": "",
  3291. "grommet_set-2-code": "",
  3292. "grommet_set-2-owner": "1",
  3293. "grommet_set-2-name": "",
  3294. "whatsit_set-TOTAL_FORMS": "3",
  3295. "whatsit_set-INITIAL_FORMS": "0",
  3296. "whatsit_set-MAX_NUM_FORMS": "0",
  3297. "whatsit_set-0-owner": "1",
  3298. "whatsit_set-0-index": "",
  3299. "whatsit_set-0-name": "",
  3300. "whatsit_set-1-owner": "1",
  3301. "whatsit_set-1-index": "",
  3302. "whatsit_set-1-name": "",
  3303. "whatsit_set-2-owner": "1",
  3304. "whatsit_set-2-index": "",
  3305. "whatsit_set-2-name": "",
  3306. "fancydoodad_set-TOTAL_FORMS": "3",
  3307. "fancydoodad_set-INITIAL_FORMS": "0",
  3308. "fancydoodad_set-MAX_NUM_FORMS": "0",
  3309. "fancydoodad_set-0-doodad_ptr": "",
  3310. "fancydoodad_set-0-owner": "1",
  3311. "fancydoodad_set-0-name": "",
  3312. "fancydoodad_set-0-expensive": "on",
  3313. "fancydoodad_set-1-doodad_ptr": "",
  3314. "fancydoodad_set-1-owner": "1",
  3315. "fancydoodad_set-1-name": "",
  3316. "fancydoodad_set-1-expensive": "on",
  3317. "fancydoodad_set-2-doodad_ptr": "",
  3318. "fancydoodad_set-2-owner": "1",
  3319. "fancydoodad_set-2-name": "",
  3320. "fancydoodad_set-2-expensive": "on",
  3321. "category_set-TOTAL_FORMS": "3",
  3322. "category_set-INITIAL_FORMS": "0",
  3323. "category_set-MAX_NUM_FORMS": "0",
  3324. "category_set-0-order": "",
  3325. "category_set-0-id": "",
  3326. "category_set-0-collector": "1",
  3327. "category_set-1-order": "",
  3328. "category_set-1-id": "",
  3329. "category_set-1-collector": "1",
  3330. "category_set-2-order": "",
  3331. "category_set-2-id": "",
  3332. "category_set-2-collector": "1",
  3333. }
  3334. self.client.force_login(self.superuser)
  3335. self.collector = Collector(pk=1, name='John Fowles')
  3336. self.collector.save()
  3337. def test_simple_inline(self):
  3338. "A simple model can be saved as inlines"
  3339. # First add a new inline
  3340. self.post_data['widget_set-0-name'] = "Widget 1"
  3341. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3342. response = self.client.post(collector_url, self.post_data)
  3343. self.assertEqual(response.status_code, 302)
  3344. self.assertEqual(Widget.objects.count(), 1)
  3345. self.assertEqual(Widget.objects.all()[0].name, "Widget 1")
  3346. widget_id = Widget.objects.all()[0].id
  3347. # The PK link exists on the rendered form
  3348. response = self.client.get(collector_url)
  3349. self.assertContains(response, 'name="widget_set-0-id"')
  3350. # No file or image fields, no enctype on the forms
  3351. self.assertIs(response.context['has_file_field'], False)
  3352. self.assertNotContains(response, MULTIPART_ENCTYPE)
  3353. # Now resave that inline
  3354. self.post_data['widget_set-INITIAL_FORMS'] = "1"
  3355. self.post_data['widget_set-0-id'] = str(widget_id)
  3356. self.post_data['widget_set-0-name'] = "Widget 1"
  3357. response = self.client.post(collector_url, self.post_data)
  3358. self.assertEqual(response.status_code, 302)
  3359. self.assertEqual(Widget.objects.count(), 1)
  3360. self.assertEqual(Widget.objects.all()[0].name, "Widget 1")
  3361. # Now modify that inline
  3362. self.post_data['widget_set-INITIAL_FORMS'] = "1"
  3363. self.post_data['widget_set-0-id'] = str(widget_id)
  3364. self.post_data['widget_set-0-name'] = "Widget 1 Updated"
  3365. response = self.client.post(collector_url, self.post_data)
  3366. self.assertEqual(response.status_code, 302)
  3367. self.assertEqual(Widget.objects.count(), 1)
  3368. self.assertEqual(Widget.objects.all()[0].name, "Widget 1 Updated")
  3369. def test_simple_inline_permissions(self):
  3370. """
  3371. Changes aren't allowed without change permissions for the inline object.
  3372. """
  3373. # User who can view Articles
  3374. permissionuser = User.objects.create_user(
  3375. username='permissionuser', password='secret',
  3376. email='vuser@example.com', is_staff=True,
  3377. )
  3378. permissionuser.user_permissions.add(get_perm(Collector, get_permission_codename('view', Collector._meta)))
  3379. permissionuser.user_permissions.add(get_perm(Widget, get_permission_codename('view', Widget._meta)))
  3380. self.client.force_login(permissionuser)
  3381. # Without add permission, a new inline can't be added.
  3382. self.post_data['widget_set-0-name'] = 'Widget 1'
  3383. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3384. response = self.client.post(collector_url, self.post_data)
  3385. self.assertEqual(response.status_code, 302)
  3386. self.assertEqual(Widget.objects.count(), 0)
  3387. # But after adding the permisson it can.
  3388. permissionuser.user_permissions.add(get_perm(Widget, get_permission_codename('add', Widget._meta)))
  3389. self.post_data['widget_set-0-name'] = "Widget 1"
  3390. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3391. response = self.client.post(collector_url, self.post_data)
  3392. self.assertEqual(response.status_code, 302)
  3393. self.assertEqual(Widget.objects.count(), 1)
  3394. self.assertEqual(Widget.objects.first().name, 'Widget 1')
  3395. widget_id = Widget.objects.first().id
  3396. # Without the change permission, a POST doesn't change the object.
  3397. self.post_data['widget_set-INITIAL_FORMS'] = '1'
  3398. self.post_data['widget_set-0-id'] = str(widget_id)
  3399. self.post_data['widget_set-0-name'] = 'Widget 1 Updated'
  3400. response = self.client.post(collector_url, self.post_data)
  3401. self.assertEqual(response.status_code, 302)
  3402. self.assertEqual(Widget.objects.count(), 1)
  3403. self.assertEqual(Widget.objects.first().name, 'Widget 1')
  3404. # Now adding the change permission and editing works.
  3405. permissionuser.user_permissions.remove(get_perm(Widget, get_permission_codename('add', Widget._meta)))
  3406. permissionuser.user_permissions.add(get_perm(Widget, get_permission_codename('change', Widget._meta)))
  3407. self.post_data['widget_set-INITIAL_FORMS'] = '1'
  3408. self.post_data['widget_set-0-id'] = str(widget_id)
  3409. self.post_data['widget_set-0-name'] = 'Widget 1 Updated'
  3410. response = self.client.post(collector_url, self.post_data)
  3411. self.assertEqual(response.status_code, 302)
  3412. self.assertEqual(Widget.objects.count(), 1)
  3413. self.assertEqual(Widget.objects.first().name, 'Widget 1 Updated')
  3414. def test_explicit_autofield_inline(self):
  3415. "A model with an explicit autofield primary key can be saved as inlines. Regression for #8093"
  3416. # First add a new inline
  3417. self.post_data['grommet_set-0-name'] = "Grommet 1"
  3418. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3419. response = self.client.post(collector_url, self.post_data)
  3420. self.assertEqual(response.status_code, 302)
  3421. self.assertEqual(Grommet.objects.count(), 1)
  3422. self.assertEqual(Grommet.objects.all()[0].name, "Grommet 1")
  3423. # The PK link exists on the rendered form
  3424. response = self.client.get(collector_url)
  3425. self.assertContains(response, 'name="grommet_set-0-code"')
  3426. # Now resave that inline
  3427. self.post_data['grommet_set-INITIAL_FORMS'] = "1"
  3428. self.post_data['grommet_set-0-code'] = str(Grommet.objects.all()[0].code)
  3429. self.post_data['grommet_set-0-name'] = "Grommet 1"
  3430. response = self.client.post(collector_url, self.post_data)
  3431. self.assertEqual(response.status_code, 302)
  3432. self.assertEqual(Grommet.objects.count(), 1)
  3433. self.assertEqual(Grommet.objects.all()[0].name, "Grommet 1")
  3434. # Now modify that inline
  3435. self.post_data['grommet_set-INITIAL_FORMS'] = "1"
  3436. self.post_data['grommet_set-0-code'] = str(Grommet.objects.all()[0].code)
  3437. self.post_data['grommet_set-0-name'] = "Grommet 1 Updated"
  3438. response = self.client.post(collector_url, self.post_data)
  3439. self.assertEqual(response.status_code, 302)
  3440. self.assertEqual(Grommet.objects.count(), 1)
  3441. self.assertEqual(Grommet.objects.all()[0].name, "Grommet 1 Updated")
  3442. def test_char_pk_inline(self):
  3443. "A model with a character PK can be saved as inlines. Regression for #10992"
  3444. # First add a new inline
  3445. self.post_data['doohickey_set-0-code'] = "DH1"
  3446. self.post_data['doohickey_set-0-name'] = "Doohickey 1"
  3447. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3448. response = self.client.post(collector_url, self.post_data)
  3449. self.assertEqual(response.status_code, 302)
  3450. self.assertEqual(DooHickey.objects.count(), 1)
  3451. self.assertEqual(DooHickey.objects.all()[0].name, "Doohickey 1")
  3452. # The PK link exists on the rendered form
  3453. response = self.client.get(collector_url)
  3454. self.assertContains(response, 'name="doohickey_set-0-code"')
  3455. # Now resave that inline
  3456. self.post_data['doohickey_set-INITIAL_FORMS'] = "1"
  3457. self.post_data['doohickey_set-0-code'] = "DH1"
  3458. self.post_data['doohickey_set-0-name'] = "Doohickey 1"
  3459. response = self.client.post(collector_url, self.post_data)
  3460. self.assertEqual(response.status_code, 302)
  3461. self.assertEqual(DooHickey.objects.count(), 1)
  3462. self.assertEqual(DooHickey.objects.all()[0].name, "Doohickey 1")
  3463. # Now modify that inline
  3464. self.post_data['doohickey_set-INITIAL_FORMS'] = "1"
  3465. self.post_data['doohickey_set-0-code'] = "DH1"
  3466. self.post_data['doohickey_set-0-name'] = "Doohickey 1 Updated"
  3467. response = self.client.post(collector_url, self.post_data)
  3468. self.assertEqual(response.status_code, 302)
  3469. self.assertEqual(DooHickey.objects.count(), 1)
  3470. self.assertEqual(DooHickey.objects.all()[0].name, "Doohickey 1 Updated")
  3471. def test_integer_pk_inline(self):
  3472. "A model with an integer PK can be saved as inlines. Regression for #10992"
  3473. # First add a new inline
  3474. self.post_data['whatsit_set-0-index'] = "42"
  3475. self.post_data['whatsit_set-0-name'] = "Whatsit 1"
  3476. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3477. response = self.client.post(collector_url, self.post_data)
  3478. self.assertEqual(response.status_code, 302)
  3479. self.assertEqual(Whatsit.objects.count(), 1)
  3480. self.assertEqual(Whatsit.objects.all()[0].name, "Whatsit 1")
  3481. # The PK link exists on the rendered form
  3482. response = self.client.get(collector_url)
  3483. self.assertContains(response, 'name="whatsit_set-0-index"')
  3484. # Now resave that inline
  3485. self.post_data['whatsit_set-INITIAL_FORMS'] = "1"
  3486. self.post_data['whatsit_set-0-index'] = "42"
  3487. self.post_data['whatsit_set-0-name'] = "Whatsit 1"
  3488. response = self.client.post(collector_url, self.post_data)
  3489. self.assertEqual(response.status_code, 302)
  3490. self.assertEqual(Whatsit.objects.count(), 1)
  3491. self.assertEqual(Whatsit.objects.all()[0].name, "Whatsit 1")
  3492. # Now modify that inline
  3493. self.post_data['whatsit_set-INITIAL_FORMS'] = "1"
  3494. self.post_data['whatsit_set-0-index'] = "42"
  3495. self.post_data['whatsit_set-0-name'] = "Whatsit 1 Updated"
  3496. response = self.client.post(collector_url, self.post_data)
  3497. self.assertEqual(response.status_code, 302)
  3498. self.assertEqual(Whatsit.objects.count(), 1)
  3499. self.assertEqual(Whatsit.objects.all()[0].name, "Whatsit 1 Updated")
  3500. def test_inherited_inline(self):
  3501. "An inherited model can be saved as inlines. Regression for #11042"
  3502. # First add a new inline
  3503. self.post_data['fancydoodad_set-0-name'] = "Fancy Doodad 1"
  3504. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3505. response = self.client.post(collector_url, self.post_data)
  3506. self.assertEqual(response.status_code, 302)
  3507. self.assertEqual(FancyDoodad.objects.count(), 1)
  3508. self.assertEqual(FancyDoodad.objects.all()[0].name, "Fancy Doodad 1")
  3509. doodad_pk = FancyDoodad.objects.all()[0].pk
  3510. # The PK link exists on the rendered form
  3511. response = self.client.get(collector_url)
  3512. self.assertContains(response, 'name="fancydoodad_set-0-doodad_ptr"')
  3513. # Now resave that inline
  3514. self.post_data['fancydoodad_set-INITIAL_FORMS'] = "1"
  3515. self.post_data['fancydoodad_set-0-doodad_ptr'] = str(doodad_pk)
  3516. self.post_data['fancydoodad_set-0-name'] = "Fancy Doodad 1"
  3517. response = self.client.post(collector_url, self.post_data)
  3518. self.assertEqual(response.status_code, 302)
  3519. self.assertEqual(FancyDoodad.objects.count(), 1)
  3520. self.assertEqual(FancyDoodad.objects.all()[0].name, "Fancy Doodad 1")
  3521. # Now modify that inline
  3522. self.post_data['fancydoodad_set-INITIAL_FORMS'] = "1"
  3523. self.post_data['fancydoodad_set-0-doodad_ptr'] = str(doodad_pk)
  3524. self.post_data['fancydoodad_set-0-name'] = "Fancy Doodad 1 Updated"
  3525. response = self.client.post(collector_url, self.post_data)
  3526. self.assertEqual(response.status_code, 302)
  3527. self.assertEqual(FancyDoodad.objects.count(), 1)
  3528. self.assertEqual(FancyDoodad.objects.all()[0].name, "Fancy Doodad 1 Updated")
  3529. def test_ordered_inline(self):
  3530. """
  3531. An inline with an editable ordering fields is updated correctly.
  3532. """
  3533. # Create some objects with an initial ordering
  3534. Category.objects.create(id=1, order=1, collector=self.collector)
  3535. Category.objects.create(id=2, order=2, collector=self.collector)
  3536. Category.objects.create(id=3, order=0, collector=self.collector)
  3537. Category.objects.create(id=4, order=0, collector=self.collector)
  3538. # NB: The order values must be changed so that the items are reordered.
  3539. self.post_data.update({
  3540. "name": "Frederick Clegg",
  3541. "category_set-TOTAL_FORMS": "7",
  3542. "category_set-INITIAL_FORMS": "4",
  3543. "category_set-MAX_NUM_FORMS": "0",
  3544. "category_set-0-order": "14",
  3545. "category_set-0-id": "1",
  3546. "category_set-0-collector": "1",
  3547. "category_set-1-order": "13",
  3548. "category_set-1-id": "2",
  3549. "category_set-1-collector": "1",
  3550. "category_set-2-order": "1",
  3551. "category_set-2-id": "3",
  3552. "category_set-2-collector": "1",
  3553. "category_set-3-order": "0",
  3554. "category_set-3-id": "4",
  3555. "category_set-3-collector": "1",
  3556. "category_set-4-order": "",
  3557. "category_set-4-id": "",
  3558. "category_set-4-collector": "1",
  3559. "category_set-5-order": "",
  3560. "category_set-5-id": "",
  3561. "category_set-5-collector": "1",
  3562. "category_set-6-order": "",
  3563. "category_set-6-id": "",
  3564. "category_set-6-collector": "1",
  3565. })
  3566. collector_url = reverse('admin:admin_views_collector_change', args=(self.collector.pk,))
  3567. response = self.client.post(collector_url, self.post_data)
  3568. # Successful post will redirect
  3569. self.assertEqual(response.status_code, 302)
  3570. # The order values have been applied to the right objects
  3571. self.assertEqual(self.collector.category_set.count(), 4)
  3572. self.assertEqual(Category.objects.get(id=1).order, 14)
  3573. self.assertEqual(Category.objects.get(id=2).order, 13)
  3574. self.assertEqual(Category.objects.get(id=3).order, 1)
  3575. self.assertEqual(Category.objects.get(id=4).order, 0)
  3576. @override_settings(ROOT_URLCONF='admin_views.urls')
  3577. class NeverCacheTests(TestCase):
  3578. @classmethod
  3579. def setUpTestData(cls):
  3580. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  3581. cls.s1 = Section.objects.create(name='Test section')
  3582. def setUp(self):
  3583. self.client.force_login(self.superuser)
  3584. def test_admin_index(self):
  3585. "Check the never-cache status of the main index"
  3586. response = self.client.get(reverse('admin:index'))
  3587. self.assertEqual(get_max_age(response), 0)
  3588. def test_app_index(self):
  3589. "Check the never-cache status of an application index"
  3590. response = self.client.get(reverse('admin:app_list', args=('admin_views',)))
  3591. self.assertEqual(get_max_age(response), 0)
  3592. def test_model_index(self):
  3593. "Check the never-cache status of a model index"
  3594. response = self.client.get(reverse('admin:admin_views_fabric_changelist'))
  3595. self.assertEqual(get_max_age(response), 0)
  3596. def test_model_add(self):
  3597. "Check the never-cache status of a model add page"
  3598. response = self.client.get(reverse('admin:admin_views_fabric_add'))
  3599. self.assertEqual(get_max_age(response), 0)
  3600. def test_model_view(self):
  3601. "Check the never-cache status of a model edit page"
  3602. response = self.client.get(reverse('admin:admin_views_section_change', args=(self.s1.pk,)))
  3603. self.assertEqual(get_max_age(response), 0)
  3604. def test_model_history(self):
  3605. "Check the never-cache status of a model history page"
  3606. response = self.client.get(reverse('admin:admin_views_section_history', args=(self.s1.pk,)))
  3607. self.assertEqual(get_max_age(response), 0)
  3608. def test_model_delete(self):
  3609. "Check the never-cache status of a model delete page"
  3610. response = self.client.get(reverse('admin:admin_views_section_delete', args=(self.s1.pk,)))
  3611. self.assertEqual(get_max_age(response), 0)
  3612. def test_login(self):
  3613. "Check the never-cache status of login views"
  3614. self.client.logout()
  3615. response = self.client.get(reverse('admin:index'))
  3616. self.assertEqual(get_max_age(response), 0)
  3617. def test_logout(self):
  3618. "Check the never-cache status of logout view"
  3619. response = self.client.get(reverse('admin:logout'))
  3620. self.assertEqual(get_max_age(response), 0)
  3621. def test_password_change(self):
  3622. "Check the never-cache status of the password change view"
  3623. self.client.logout()
  3624. response = self.client.get(reverse('admin:password_change'))
  3625. self.assertIsNone(get_max_age(response))
  3626. def test_password_change_done(self):
  3627. "Check the never-cache status of the password change done view"
  3628. response = self.client.get(reverse('admin:password_change_done'))
  3629. self.assertIsNone(get_max_age(response))
  3630. def test_JS_i18n(self):
  3631. "Check the never-cache status of the JavaScript i18n view"
  3632. response = self.client.get(reverse('admin:jsi18n'))
  3633. self.assertIsNone(get_max_age(response))
  3634. @override_settings(ROOT_URLCONF='admin_views.urls')
  3635. class PrePopulatedTest(TestCase):
  3636. @classmethod
  3637. def setUpTestData(cls):
  3638. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  3639. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  3640. def setUp(self):
  3641. self.client.force_login(self.superuser)
  3642. def test_prepopulated_on(self):
  3643. response = self.client.get(reverse('admin:admin_views_prepopulatedpost_add'))
  3644. self.assertContains(response, "&quot;id&quot;: &quot;#id_slug&quot;")
  3645. self.assertContains(response, "&quot;dependency_ids&quot;: [&quot;#id_title&quot;]")
  3646. self.assertContains(response, "&quot;id&quot;: &quot;#id_prepopulatedsubpost_set-0-subslug&quot;")
  3647. def test_prepopulated_off(self):
  3648. response = self.client.get(reverse('admin:admin_views_prepopulatedpost_change', args=(self.p1.pk,)))
  3649. self.assertContains(response, "A Long Title")
  3650. self.assertNotContains(response, "&quot;id&quot;: &quot;#id_slug&quot;")
  3651. self.assertNotContains(response, "&quot;dependency_ids&quot;: [&quot;#id_title&quot;]")
  3652. self.assertNotContains(
  3653. response,
  3654. "&quot;id&quot;: &quot;#id_prepopulatedsubpost_set-0-subslug&quot;"
  3655. )
  3656. @override_settings(USE_THOUSAND_SEPARATOR=True, USE_L10N=True)
  3657. def test_prepopulated_maxlength_localized(self):
  3658. """
  3659. Regression test for #15938: if USE_THOUSAND_SEPARATOR is set, make sure
  3660. that maxLength (in the JavaScript) is rendered without separators.
  3661. """
  3662. response = self.client.get(reverse('admin:admin_views_prepopulatedpostlargeslug_add'))
  3663. self.assertContains(response, "&quot;maxLength&quot;: 1000") # instead of 1,000
  3664. @override_settings(ROOT_URLCONF='admin_views.urls')
  3665. class SeleniumTests(AdminSeleniumTestCase):
  3666. available_apps = ['admin_views'] + AdminSeleniumTestCase.available_apps
  3667. def setUp(self):
  3668. self.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  3669. self.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  3670. def test_prepopulated_fields(self):
  3671. """
  3672. The JavaScript-automated prepopulated fields work with the main form
  3673. and with stacked and tabular inlines.
  3674. Refs #13068, #9264, #9983, #9784.
  3675. """
  3676. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3677. self.selenium.get(self.live_server_url + reverse('admin:admin_views_mainprepopulated_add'))
  3678. self.wait_for('.select2')
  3679. # Main form ----------------------------------------------------------
  3680. self.selenium.find_element_by_id('id_pubdate').send_keys('2012-02-18')
  3681. self.get_select_option('#id_status', 'option two').click()
  3682. self.selenium.find_element_by_id('id_name').send_keys(' this is the mAin nÀMë and it\'s awεšomeııı')
  3683. slug1 = self.selenium.find_element_by_id('id_slug1').get_attribute('value')
  3684. slug2 = self.selenium.find_element_by_id('id_slug2').get_attribute('value')
  3685. slug3 = self.selenium.find_element_by_id('id_slug3').get_attribute('value')
  3686. self.assertEqual(slug1, 'main-name-and-its-awesomeiii-2012-02-18')
  3687. self.assertEqual(slug2, 'option-two-main-name-and-its-awesomeiii')
  3688. self.assertEqual(slug3, 'this-is-the-main-n\xe0m\xeb-and-its-aw\u03b5\u0161ome\u0131\u0131\u0131')
  3689. # Stacked inlines ----------------------------------------------------
  3690. # Initial inline
  3691. self.selenium.find_element_by_id('id_relatedprepopulated_set-0-pubdate').send_keys('2011-12-17')
  3692. self.get_select_option('#id_relatedprepopulated_set-0-status', 'option one').click()
  3693. self.selenium.find_element_by_id('id_relatedprepopulated_set-0-name').send_keys(
  3694. ' here is a sŤāÇkeð inline ! '
  3695. )
  3696. slug1 = self.selenium.find_element_by_id('id_relatedprepopulated_set-0-slug1').get_attribute('value')
  3697. slug2 = self.selenium.find_element_by_id('id_relatedprepopulated_set-0-slug2').get_attribute('value')
  3698. self.assertEqual(slug1, 'here-stacked-inline-2011-12-17')
  3699. self.assertEqual(slug2, 'option-one-here-stacked-inline')
  3700. initial_select2_inputs = self.selenium.find_elements_by_class_name('select2-selection')
  3701. # Inline formsets have empty/invisible forms.
  3702. # Only the 4 visible select2 inputs are initialized.
  3703. num_initial_select2_inputs = len(initial_select2_inputs)
  3704. self.assertEqual(num_initial_select2_inputs, 4)
  3705. # Add an inline
  3706. self.selenium.find_elements_by_link_text('Add another Related prepopulated')[0].click()
  3707. self.assertEqual(
  3708. len(self.selenium.find_elements_by_class_name('select2-selection')),
  3709. num_initial_select2_inputs + 2
  3710. )
  3711. self.selenium.find_element_by_id('id_relatedprepopulated_set-1-pubdate').send_keys('1999-01-25')
  3712. self.get_select_option('#id_relatedprepopulated_set-1-status', 'option two').click()
  3713. self.selenium.find_element_by_id('id_relatedprepopulated_set-1-name').send_keys(
  3714. ' now you haVe anöther sŤāÇkeð inline with a very ... '
  3715. 'loooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooog text... '
  3716. )
  3717. slug1 = self.selenium.find_element_by_id('id_relatedprepopulated_set-1-slug1').get_attribute('value')
  3718. slug2 = self.selenium.find_element_by_id('id_relatedprepopulated_set-1-slug2').get_attribute('value')
  3719. # 50 characters maximum for slug1 field
  3720. self.assertEqual(slug1, 'now-you-have-another-stacked-inline-very-loooooooo')
  3721. # 60 characters maximum for slug2 field
  3722. self.assertEqual(slug2, 'option-two-now-you-have-another-stacked-inline-very-looooooo')
  3723. # Tabular inlines ----------------------------------------------------
  3724. # Initial inline
  3725. self.selenium.find_element_by_id('id_relatedprepopulated_set-2-0-pubdate').send_keys('1234-12-07')
  3726. self.get_select_option('#id_relatedprepopulated_set-2-0-status', 'option two').click()
  3727. self.selenium.find_element_by_id('id_relatedprepopulated_set-2-0-name').send_keys(
  3728. 'And now, with a tÃbűlaŘ inline !!!'
  3729. )
  3730. slug1 = self.selenium.find_element_by_id('id_relatedprepopulated_set-2-0-slug1').get_attribute('value')
  3731. slug2 = self.selenium.find_element_by_id('id_relatedprepopulated_set-2-0-slug2').get_attribute('value')
  3732. self.assertEqual(slug1, 'and-now-tabular-inline-1234-12-07')
  3733. self.assertEqual(slug2, 'option-two-and-now-tabular-inline')
  3734. # Add an inline
  3735. self.selenium.find_elements_by_link_text('Add another Related prepopulated')[1].click()
  3736. self.assertEqual(
  3737. len(self.selenium.find_elements_by_class_name('select2-selection')),
  3738. num_initial_select2_inputs + 4
  3739. )
  3740. self.selenium.find_element_by_id('id_relatedprepopulated_set-2-1-pubdate').send_keys('1981-08-22')
  3741. self.get_select_option('#id_relatedprepopulated_set-2-1-status', 'option one').click()
  3742. self.selenium.find_element_by_id('id_relatedprepopulated_set-2-1-name').send_keys(
  3743. r'a tÃbűlaŘ inline with ignored ;"&*^\%$#@-/`~ characters'
  3744. )
  3745. slug1 = self.selenium.find_element_by_id('id_relatedprepopulated_set-2-1-slug1').get_attribute('value')
  3746. slug2 = self.selenium.find_element_by_id('id_relatedprepopulated_set-2-1-slug2').get_attribute('value')
  3747. self.assertEqual(slug1, 'tabular-inline-ignored-characters-1981-08-22')
  3748. self.assertEqual(slug2, 'option-one-tabular-inline-ignored-characters')
  3749. # Add an inline without an initial inline.
  3750. # The button is outside of the browser frame.
  3751. self.selenium.execute_script("window.scrollTo(0, document.body.scrollHeight);")
  3752. self.selenium.find_elements_by_link_text('Add another Related prepopulated')[2].click()
  3753. self.assertEqual(
  3754. len(self.selenium.find_elements_by_class_name('select2-selection')),
  3755. num_initial_select2_inputs + 6
  3756. )
  3757. # Save and check that everything is properly stored in the database
  3758. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  3759. self.wait_page_loaded()
  3760. self.assertEqual(MainPrepopulated.objects.all().count(), 1)
  3761. MainPrepopulated.objects.get(
  3762. name=' this is the mAin nÀMë and it\'s awεšomeııı',
  3763. pubdate='2012-02-18',
  3764. status='option two',
  3765. slug1='main-name-and-its-awesomeiii-2012-02-18',
  3766. slug2='option-two-main-name-and-its-awesomeiii',
  3767. )
  3768. self.assertEqual(RelatedPrepopulated.objects.all().count(), 4)
  3769. RelatedPrepopulated.objects.get(
  3770. name=' here is a sŤāÇkeð inline ! ',
  3771. pubdate='2011-12-17',
  3772. status='option one',
  3773. slug1='here-stacked-inline-2011-12-17',
  3774. slug2='option-one-here-stacked-inline',
  3775. )
  3776. RelatedPrepopulated.objects.get(
  3777. # 75 characters in name field
  3778. name=' now you haVe anöther sŤāÇkeð inline with a very ... loooooooooooooooooo',
  3779. pubdate='1999-01-25',
  3780. status='option two',
  3781. slug1='now-you-have-another-stacked-inline-very-loooooooo',
  3782. slug2='option-two-now-you-have-another-stacked-inline-very-looooooo',
  3783. )
  3784. RelatedPrepopulated.objects.get(
  3785. name='And now, with a tÃbűlaŘ inline !!!',
  3786. pubdate='1234-12-07',
  3787. status='option two',
  3788. slug1='and-now-tabular-inline-1234-12-07',
  3789. slug2='option-two-and-now-tabular-inline',
  3790. )
  3791. RelatedPrepopulated.objects.get(
  3792. name=r'a tÃbűlaŘ inline with ignored ;"&*^\%$#@-/`~ characters',
  3793. pubdate='1981-08-22',
  3794. status='option one',
  3795. slug1='tabular-inline-ignored-characters-1981-08-22',
  3796. slug2='option-one-tabular-inline-ignored-characters',
  3797. )
  3798. def test_populate_existing_object(self):
  3799. """
  3800. The prepopulation works for existing objects too, as long as
  3801. the original field is empty (#19082).
  3802. """
  3803. # Slugs are empty to start with.
  3804. item = MainPrepopulated.objects.create(
  3805. name=' this is the mAin nÀMë',
  3806. pubdate='2012-02-18',
  3807. status='option two',
  3808. slug1='',
  3809. slug2='',
  3810. )
  3811. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3812. object_url = self.live_server_url + reverse('admin:admin_views_mainprepopulated_change', args=(item.id,))
  3813. self.selenium.get(object_url)
  3814. self.selenium.find_element_by_id('id_name').send_keys(' the best')
  3815. # The slugs got prepopulated since they were originally empty
  3816. slug1 = self.selenium.find_element_by_id('id_slug1').get_attribute('value')
  3817. slug2 = self.selenium.find_element_by_id('id_slug2').get_attribute('value')
  3818. self.assertEqual(slug1, 'main-name-best-2012-02-18')
  3819. self.assertEqual(slug2, 'option-two-main-name-best')
  3820. # Save the object
  3821. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  3822. self.wait_page_loaded()
  3823. self.selenium.get(object_url)
  3824. self.selenium.find_element_by_id('id_name').send_keys(' hello')
  3825. # The slugs got prepopulated didn't change since they were originally not empty
  3826. slug1 = self.selenium.find_element_by_id('id_slug1').get_attribute('value')
  3827. slug2 = self.selenium.find_element_by_id('id_slug2').get_attribute('value')
  3828. self.assertEqual(slug1, 'main-name-best-2012-02-18')
  3829. self.assertEqual(slug2, 'option-two-main-name-best')
  3830. def test_collapsible_fieldset(self):
  3831. """
  3832. The 'collapse' class in fieldsets definition allows to
  3833. show/hide the appropriate field section.
  3834. """
  3835. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3836. self.selenium.get(self.live_server_url + reverse('admin:admin_views_article_add'))
  3837. self.assertFalse(self.selenium.find_element_by_id('id_title').is_displayed())
  3838. self.selenium.find_elements_by_link_text('Show')[0].click()
  3839. self.assertTrue(self.selenium.find_element_by_id('id_title').is_displayed())
  3840. self.assertEqual(self.selenium.find_element_by_id('fieldsetcollapser0').text, "Hide")
  3841. def test_first_field_focus(self):
  3842. """JavaScript-assisted auto-focus on first usable form field."""
  3843. # First form field has a single widget
  3844. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3845. self.selenium.get(self.live_server_url + reverse('admin:admin_views_picture_add'))
  3846. self.assertEqual(
  3847. self.selenium.switch_to.active_element,
  3848. self.selenium.find_element_by_id('id_name')
  3849. )
  3850. # First form field has a MultiWidget
  3851. self.selenium.get(self.live_server_url + reverse('admin:admin_views_reservation_add'))
  3852. self.assertEqual(
  3853. self.selenium.switch_to.active_element,
  3854. self.selenium.find_element_by_id('id_start_date_0')
  3855. )
  3856. def test_cancel_delete_confirmation(self):
  3857. "Cancelling the deletion of an object takes the user back one page."
  3858. pizza = Pizza.objects.create(name="Double Cheese")
  3859. url = reverse('admin:admin_views_pizza_change', args=(pizza.id,))
  3860. full_url = self.live_server_url + url
  3861. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3862. self.selenium.get(full_url)
  3863. self.selenium.find_element_by_class_name('deletelink').click()
  3864. # Click 'cancel' on the delete page.
  3865. self.selenium.find_element_by_class_name('cancel-link').click()
  3866. # Wait until we're back on the change page.
  3867. self.wait_for_text('#content h1', 'Change pizza')
  3868. self.assertEqual(self.selenium.current_url, full_url)
  3869. self.assertEqual(Pizza.objects.count(), 1)
  3870. def test_cancel_delete_related_confirmation(self):
  3871. """
  3872. Cancelling the deletion of an object with relations takes the user back
  3873. one page.
  3874. """
  3875. pizza = Pizza.objects.create(name="Double Cheese")
  3876. topping1 = Topping.objects.create(name="Cheddar")
  3877. topping2 = Topping.objects.create(name="Mozzarella")
  3878. pizza.toppings.add(topping1, topping2)
  3879. url = reverse('admin:admin_views_pizza_change', args=(pizza.id,))
  3880. full_url = self.live_server_url + url
  3881. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3882. self.selenium.get(full_url)
  3883. self.selenium.find_element_by_class_name('deletelink').click()
  3884. # Click 'cancel' on the delete page.
  3885. self.selenium.find_element_by_class_name('cancel-link').click()
  3886. # Wait until we're back on the change page.
  3887. self.wait_for_text('#content h1', 'Change pizza')
  3888. self.assertEqual(self.selenium.current_url, full_url)
  3889. self.assertEqual(Pizza.objects.count(), 1)
  3890. self.assertEqual(Topping.objects.count(), 2)
  3891. def test_list_editable_popups(self):
  3892. """
  3893. list_editable foreign keys have add/change popups.
  3894. """
  3895. from selenium.webdriver.support.ui import Select
  3896. s1 = Section.objects.create(name='Test section')
  3897. Article.objects.create(
  3898. title='foo',
  3899. content='<p>Middle content</p>',
  3900. date=datetime.datetime(2008, 3, 18, 11, 54, 58),
  3901. section=s1,
  3902. )
  3903. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3904. self.selenium.get(self.live_server_url + reverse('admin:admin_views_article_changelist'))
  3905. # Change popup
  3906. self.selenium.find_element_by_id('change_id_form-0-section').click()
  3907. self.wait_for_popup()
  3908. self.selenium.switch_to.window(self.selenium.window_handles[-1])
  3909. self.wait_for_text('#content h1', 'Change section')
  3910. name_input = self.selenium.find_element_by_id('id_name')
  3911. name_input.clear()
  3912. name_input.send_keys('<i>edited section</i>')
  3913. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  3914. self.selenium.switch_to.window(self.selenium.window_handles[0])
  3915. select = Select(self.selenium.find_element_by_id('id_form-0-section'))
  3916. self.assertEqual(select.first_selected_option.text, '<i>edited section</i>')
  3917. # Rendered select2 input.
  3918. select2_display = self.selenium.find_element_by_class_name('select2-selection__rendered')
  3919. # Clear button (×\n) is included in text.
  3920. self.assertEqual(select2_display.text, '×\n<i>edited section</i>')
  3921. # Add popup
  3922. self.selenium.find_element_by_id('add_id_form-0-section').click()
  3923. self.wait_for_popup()
  3924. self.selenium.switch_to.window(self.selenium.window_handles[-1])
  3925. self.wait_for_text('#content h1', 'Add section')
  3926. self.selenium.find_element_by_id('id_name').send_keys('new section')
  3927. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  3928. self.selenium.switch_to.window(self.selenium.window_handles[0])
  3929. select = Select(self.selenium.find_element_by_id('id_form-0-section'))
  3930. self.assertEqual(select.first_selected_option.text, 'new section')
  3931. select2_display = self.selenium.find_element_by_class_name('select2-selection__rendered')
  3932. # Clear button (×\n) is included in text.
  3933. self.assertEqual(select2_display.text, '×\nnew section')
  3934. def test_inline_uuid_pk_edit_with_popup(self):
  3935. from selenium.webdriver.support.ui import Select
  3936. parent = ParentWithUUIDPK.objects.create(title='test')
  3937. related_with_parent = RelatedWithUUIDPKModel.objects.create(parent=parent)
  3938. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3939. change_url = reverse('admin:admin_views_relatedwithuuidpkmodel_change', args=(related_with_parent.id,))
  3940. self.selenium.get(self.live_server_url + change_url)
  3941. self.selenium.find_element_by_id('change_id_parent').click()
  3942. self.wait_for_popup()
  3943. self.selenium.switch_to.window(self.selenium.window_handles[-1])
  3944. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  3945. self.selenium.switch_to.window(self.selenium.window_handles[0])
  3946. select = Select(self.selenium.find_element_by_id('id_parent'))
  3947. self.assertEqual(select.first_selected_option.text, str(parent.id))
  3948. self.assertEqual(select.first_selected_option.get_attribute('value'), str(parent.id))
  3949. def test_inline_uuid_pk_add_with_popup(self):
  3950. from selenium.webdriver.support.ui import Select
  3951. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3952. self.selenium.get(self.live_server_url + reverse('admin:admin_views_relatedwithuuidpkmodel_add'))
  3953. self.selenium.find_element_by_id('add_id_parent').click()
  3954. self.wait_for_popup()
  3955. self.selenium.switch_to.window(self.selenium.window_handles[-1])
  3956. self.selenium.find_element_by_id('id_title').send_keys('test')
  3957. self.selenium.find_element_by_xpath('//input[@value="Save"]').click()
  3958. self.selenium.switch_to.window(self.selenium.window_handles[0])
  3959. select = Select(self.selenium.find_element_by_id('id_parent'))
  3960. uuid_id = str(ParentWithUUIDPK.objects.first().id)
  3961. self.assertEqual(select.first_selected_option.text, uuid_id)
  3962. self.assertEqual(select.first_selected_option.get_attribute('value'), uuid_id)
  3963. def test_inline_uuid_pk_delete_with_popup(self):
  3964. from selenium.webdriver.support.ui import Select
  3965. parent = ParentWithUUIDPK.objects.create(title='test')
  3966. related_with_parent = RelatedWithUUIDPKModel.objects.create(parent=parent)
  3967. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3968. change_url = reverse('admin:admin_views_relatedwithuuidpkmodel_change', args=(related_with_parent.id,))
  3969. self.selenium.get(self.live_server_url + change_url)
  3970. self.selenium.find_element_by_id('delete_id_parent').click()
  3971. self.wait_for_popup()
  3972. self.selenium.switch_to.window(self.selenium.window_handles[-1])
  3973. self.selenium.find_element_by_xpath('//input[@value="Yes, I\'m sure"]').click()
  3974. self.selenium.switch_to.window(self.selenium.window_handles[0])
  3975. select = Select(self.selenium.find_element_by_id('id_parent'))
  3976. self.assertEqual(ParentWithUUIDPK.objects.count(), 0)
  3977. self.assertEqual(select.first_selected_option.text, '---------')
  3978. self.assertEqual(select.first_selected_option.get_attribute('value'), '')
  3979. def test_inline_with_popup_cancel_delete(self):
  3980. """Clicking ""No, take me back" on a delete popup closes the window."""
  3981. parent = ParentWithUUIDPK.objects.create(title='test')
  3982. related_with_parent = RelatedWithUUIDPKModel.objects.create(parent=parent)
  3983. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3984. change_url = reverse('admin:admin_views_relatedwithuuidpkmodel_change', args=(related_with_parent.id,))
  3985. self.selenium.get(self.live_server_url + change_url)
  3986. self.selenium.find_element_by_id('delete_id_parent').click()
  3987. self.wait_for_popup()
  3988. self.selenium.switch_to.window(self.selenium.window_handles[-1])
  3989. self.selenium.find_element_by_xpath('//a[text()="No, take me back"]').click()
  3990. self.selenium.switch_to.window(self.selenium.window_handles[0])
  3991. self.assertEqual(len(self.selenium.window_handles), 1)
  3992. def test_list_editable_raw_id_fields(self):
  3993. parent = ParentWithUUIDPK.objects.create(title='test')
  3994. parent2 = ParentWithUUIDPK.objects.create(title='test2')
  3995. RelatedWithUUIDPKModel.objects.create(parent=parent)
  3996. self.admin_login(username='super', password='secret', login_url=reverse('admin:index'))
  3997. change_url = reverse('admin:admin_views_relatedwithuuidpkmodel_changelist', current_app=site2.name)
  3998. self.selenium.get(self.live_server_url + change_url)
  3999. self.selenium.find_element_by_id('lookup_id_form-0-parent').click()
  4000. self.wait_for_popup()
  4001. self.selenium.switch_to.window(self.selenium.window_handles[-1])
  4002. # Select "parent2" in the popup.
  4003. self.selenium.find_element_by_link_text(str(parent2.pk)).click()
  4004. self.selenium.switch_to.window(self.selenium.window_handles[0])
  4005. # The newly selected pk should appear in the raw id input.
  4006. value = self.selenium.find_element_by_id('id_form-0-parent').get_attribute('value')
  4007. self.assertEqual(value, str(parent2.pk))
  4008. @override_settings(ROOT_URLCONF='admin_views.urls')
  4009. class ReadonlyTest(AdminFieldExtractionMixin, TestCase):
  4010. @classmethod
  4011. def setUpTestData(cls):
  4012. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4013. def setUp(self):
  4014. self.client.force_login(self.superuser)
  4015. def test_readonly_get(self):
  4016. response = self.client.get(reverse('admin:admin_views_post_add'))
  4017. self.assertEqual(response.status_code, 200)
  4018. self.assertNotContains(response, 'name="posted"')
  4019. # 3 fields + 2 submit buttons + 5 inline management form fields, + 2
  4020. # hidden fields for inlines + 1 field for the inline + 2 empty form
  4021. self.assertContains(response, "<input", count=15)
  4022. self.assertContains(response, formats.localize(datetime.date.today()))
  4023. self.assertContains(response, "<label>Awesomeness level:</label>")
  4024. self.assertContains(response, "Very awesome.")
  4025. self.assertContains(response, "Unknown coolness.")
  4026. self.assertContains(response, "foo")
  4027. # Multiline text in a readonly field gets <br> tags
  4028. self.assertContains(response, 'Multiline<br>test<br>string')
  4029. self.assertContains(response, '<div class="readonly">Multiline<br>html<br>content</div>', html=True)
  4030. self.assertContains(response, 'InlineMultiline<br>test<br>string')
  4031. self.assertContains(response, formats.localize(datetime.date.today() - datetime.timedelta(days=7)))
  4032. self.assertContains(response, '<div class="form-row field-coolness">')
  4033. self.assertContains(response, '<div class="form-row field-awesomeness_level">')
  4034. self.assertContains(response, '<div class="form-row field-posted">')
  4035. self.assertContains(response, '<div class="form-row field-value">')
  4036. self.assertContains(response, '<div class="form-row">')
  4037. self.assertContains(response, '<div class="help">', 3)
  4038. self.assertContains(
  4039. response,
  4040. '<div class="help">Some help text for the title (with unicode ŠĐĆŽćžšđ)</div>',
  4041. html=True
  4042. )
  4043. self.assertContains(
  4044. response,
  4045. '<div class="help">Some help text for the content (with unicode ŠĐĆŽćžšđ)</div>',
  4046. html=True
  4047. )
  4048. self.assertContains(
  4049. response,
  4050. '<div class="help">Some help text for the date (with unicode ŠĐĆŽćžšđ)</div>',
  4051. html=True
  4052. )
  4053. p = Post.objects.create(title="I worked on readonly_fields", content="Its good stuff")
  4054. response = self.client.get(reverse('admin:admin_views_post_change', args=(p.pk,)))
  4055. self.assertContains(response, "%d amount of cool" % p.pk)
  4056. def test_readonly_text_field(self):
  4057. p = Post.objects.create(
  4058. title="Readonly test", content="test",
  4059. readonly_content='test\r\n\r\ntest\r\n\r\ntest\r\n\r\ntest',
  4060. )
  4061. Link.objects.create(
  4062. url="http://www.djangoproject.com", post=p,
  4063. readonly_link_content="test\r\nlink",
  4064. )
  4065. response = self.client.get(reverse('admin:admin_views_post_change', args=(p.pk,)))
  4066. # Checking readonly field.
  4067. self.assertContains(response, 'test<br><br>test<br><br>test<br><br>test')
  4068. # Checking readonly field in inline.
  4069. self.assertContains(response, 'test<br>link')
  4070. def test_readonly_post(self):
  4071. data = {
  4072. "title": "Django Got Readonly Fields",
  4073. "content": "This is an incredible development.",
  4074. "link_set-TOTAL_FORMS": "1",
  4075. "link_set-INITIAL_FORMS": "0",
  4076. "link_set-MAX_NUM_FORMS": "0",
  4077. }
  4078. response = self.client.post(reverse('admin:admin_views_post_add'), data)
  4079. self.assertEqual(response.status_code, 302)
  4080. self.assertEqual(Post.objects.count(), 1)
  4081. p = Post.objects.get()
  4082. self.assertEqual(p.posted, datetime.date.today())
  4083. data["posted"] = "10-8-1990" # some date that's not today
  4084. response = self.client.post(reverse('admin:admin_views_post_add'), data)
  4085. self.assertEqual(response.status_code, 302)
  4086. self.assertEqual(Post.objects.count(), 2)
  4087. p = Post.objects.order_by('-id')[0]
  4088. self.assertEqual(p.posted, datetime.date.today())
  4089. def test_readonly_manytomany(self):
  4090. "Regression test for #13004"
  4091. response = self.client.get(reverse('admin:admin_views_pizza_add'))
  4092. self.assertEqual(response.status_code, 200)
  4093. def test_user_password_change_limited_queryset(self):
  4094. su = User.objects.filter(is_superuser=True)[0]
  4095. response = self.client.get(reverse('admin2:auth_user_password_change', args=(su.pk,)))
  4096. self.assertEqual(response.status_code, 404)
  4097. def test_change_form_renders_correct_null_choice_value(self):
  4098. """
  4099. Regression test for #17911.
  4100. """
  4101. choice = Choice.objects.create(choice=None)
  4102. response = self.client.get(reverse('admin:admin_views_choice_change', args=(choice.pk,)))
  4103. self.assertContains(response, '<div class="readonly">No opinion</div>', html=True)
  4104. def test_readonly_manytomany_backwards_ref(self):
  4105. """
  4106. Regression test for #16433 - backwards references for related objects
  4107. broke if the related field is read-only due to the help_text attribute
  4108. """
  4109. topping = Topping.objects.create(name='Salami')
  4110. pizza = Pizza.objects.create(name='Americano')
  4111. pizza.toppings.add(topping)
  4112. response = self.client.get(reverse('admin:admin_views_topping_add'))
  4113. self.assertEqual(response.status_code, 200)
  4114. def test_readonly_manytomany_forwards_ref(self):
  4115. topping = Topping.objects.create(name='Salami')
  4116. pizza = Pizza.objects.create(name='Americano')
  4117. pizza.toppings.add(topping)
  4118. response = self.client.get(reverse('admin:admin_views_pizza_change', args=(pizza.pk,)))
  4119. self.assertContains(response, '<label>Toppings:</label>', html=True)
  4120. self.assertContains(response, '<div class="readonly">Salami</div>', html=True)
  4121. def test_readonly_onetoone_backwards_ref(self):
  4122. """
  4123. Can reference a reverse OneToOneField in ModelAdmin.readonly_fields.
  4124. """
  4125. v1 = Villain.objects.create(name='Adam')
  4126. pl = Plot.objects.create(name='Test Plot', team_leader=v1, contact=v1)
  4127. pd = PlotDetails.objects.create(details='Brand New Plot', plot=pl)
  4128. response = self.client.get(reverse('admin:admin_views_plotproxy_change', args=(pl.pk,)))
  4129. field = self.get_admin_readonly_field(response, 'plotdetails')
  4130. self.assertEqual(field.contents(), 'Brand New Plot')
  4131. # The reverse relation also works if the OneToOneField is null.
  4132. pd.plot = None
  4133. pd.save()
  4134. response = self.client.get(reverse('admin:admin_views_plotproxy_change', args=(pl.pk,)))
  4135. field = self.get_admin_readonly_field(response, 'plotdetails')
  4136. self.assertEqual(field.contents(), '-') # default empty value
  4137. def test_readonly_field_overrides(self):
  4138. """
  4139. Regression test for #22087 - ModelForm Meta overrides are ignored by
  4140. AdminReadonlyField
  4141. """
  4142. p = FieldOverridePost.objects.create(title="Test Post", content="Test Content")
  4143. response = self.client.get(reverse('admin:admin_views_fieldoverridepost_change', args=(p.pk,)))
  4144. self.assertContains(response, '<div class="help">Overridden help text for the date</div>')
  4145. self.assertContains(response, '<label for="id_public">Overridden public label:</label>', html=True)
  4146. self.assertNotContains(response, "Some help text for the date (with unicode ŠĐĆŽćžšđ)")
  4147. def test_correct_autoescaping(self):
  4148. """
  4149. Make sure that non-field readonly elements are properly autoescaped (#24461)
  4150. """
  4151. section = Section.objects.create(name='<a>evil</a>')
  4152. response = self.client.get(reverse('admin:admin_views_section_change', args=(section.pk,)))
  4153. self.assertNotContains(response, "<a>evil</a>", status_code=200)
  4154. self.assertContains(response, "&lt;a&gt;evil&lt;/a&gt;", status_code=200)
  4155. @override_settings(ROOT_URLCONF='admin_views.urls')
  4156. class LimitChoicesToInAdminTest(TestCase):
  4157. @classmethod
  4158. def setUpTestData(cls):
  4159. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4160. def setUp(self):
  4161. self.client.force_login(self.superuser)
  4162. def test_limit_choices_to_as_callable(self):
  4163. """Test for ticket 2445 changes to admin."""
  4164. threepwood = Character.objects.create(
  4165. username='threepwood',
  4166. last_action=datetime.datetime.today() + datetime.timedelta(days=1),
  4167. )
  4168. marley = Character.objects.create(
  4169. username='marley',
  4170. last_action=datetime.datetime.today() - datetime.timedelta(days=1),
  4171. )
  4172. response = self.client.get(reverse('admin:admin_views_stumpjoke_add'))
  4173. # The allowed option should appear twice; the limited option should not appear.
  4174. self.assertContains(response, threepwood.username, count=2)
  4175. self.assertNotContains(response, marley.username)
  4176. @override_settings(ROOT_URLCONF='admin_views.urls')
  4177. class RawIdFieldsTest(TestCase):
  4178. @classmethod
  4179. def setUpTestData(cls):
  4180. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4181. def setUp(self):
  4182. self.client.force_login(self.superuser)
  4183. def test_limit_choices_to(self):
  4184. """Regression test for 14880"""
  4185. actor = Actor.objects.create(name="Palin", age=27)
  4186. Inquisition.objects.create(expected=True,
  4187. leader=actor,
  4188. country="England")
  4189. Inquisition.objects.create(expected=False,
  4190. leader=actor,
  4191. country="Spain")
  4192. response = self.client.get(reverse('admin:admin_views_sketch_add'))
  4193. # Find the link
  4194. m = re.search(br'<a href="([^"]*)"[^>]* id="lookup_id_inquisition"', response.content)
  4195. self.assertTrue(m) # Got a match
  4196. popup_url = m.groups()[0].decode().replace("&amp;", "&")
  4197. # Handle relative links
  4198. popup_url = urljoin(response.request['PATH_INFO'], popup_url)
  4199. # Get the popup and verify the correct objects show up in the resulting
  4200. # page. This step also tests integers, strings and booleans in the
  4201. # lookup query string; in model we define inquisition field to have a
  4202. # limit_choices_to option that includes a filter on a string field
  4203. # (inquisition__actor__name), a filter on an integer field
  4204. # (inquisition__actor__age), and a filter on a boolean field
  4205. # (inquisition__expected).
  4206. response2 = self.client.get(popup_url)
  4207. self.assertContains(response2, "Spain")
  4208. self.assertNotContains(response2, "England")
  4209. def test_limit_choices_to_isnull_false(self):
  4210. """Regression test for 20182"""
  4211. Actor.objects.create(name="Palin", age=27)
  4212. Actor.objects.create(name="Kilbraken", age=50, title="Judge")
  4213. response = self.client.get(reverse('admin:admin_views_sketch_add'))
  4214. # Find the link
  4215. m = re.search(br'<a href="([^"]*)"[^>]* id="lookup_id_defendant0"', response.content)
  4216. self.assertTrue(m) # Got a match
  4217. popup_url = m.groups()[0].decode().replace("&amp;", "&")
  4218. # Handle relative links
  4219. popup_url = urljoin(response.request['PATH_INFO'], popup_url)
  4220. # Get the popup and verify the correct objects show up in the resulting
  4221. # page. This step tests field__isnull=0 gets parsed correctly from the
  4222. # lookup query string; in model we define defendant0 field to have a
  4223. # limit_choices_to option that includes "actor__title__isnull=False".
  4224. response2 = self.client.get(popup_url)
  4225. self.assertContains(response2, "Kilbraken")
  4226. self.assertNotContains(response2, "Palin")
  4227. def test_limit_choices_to_isnull_true(self):
  4228. """Regression test for 20182"""
  4229. Actor.objects.create(name="Palin", age=27)
  4230. Actor.objects.create(name="Kilbraken", age=50, title="Judge")
  4231. response = self.client.get(reverse('admin:admin_views_sketch_add'))
  4232. # Find the link
  4233. m = re.search(br'<a href="([^"]*)"[^>]* id="lookup_id_defendant1"', response.content)
  4234. self.assertTrue(m) # Got a match
  4235. popup_url = m.groups()[0].decode().replace("&amp;", "&")
  4236. # Handle relative links
  4237. popup_url = urljoin(response.request['PATH_INFO'], popup_url)
  4238. # Get the popup and verify the correct objects show up in the resulting
  4239. # page. This step tests field__isnull=1 gets parsed correctly from the
  4240. # lookup query string; in model we define defendant1 field to have a
  4241. # limit_choices_to option that includes "actor__title__isnull=True".
  4242. response2 = self.client.get(popup_url)
  4243. self.assertNotContains(response2, "Kilbraken")
  4244. self.assertContains(response2, "Palin")
  4245. def test_list_display_method_same_name_as_reverse_accessor(self):
  4246. """
  4247. Should be able to use a ModelAdmin method in list_display that has the
  4248. same name as a reverse model field ("sketch" in this case).
  4249. """
  4250. actor = Actor.objects.create(name="Palin", age=27)
  4251. Inquisition.objects.create(expected=True, leader=actor, country="England")
  4252. response = self.client.get(reverse('admin:admin_views_inquisition_changelist'))
  4253. self.assertContains(response, 'list-display-sketch')
  4254. @override_settings(ROOT_URLCONF='admin_views.urls')
  4255. class UserAdminTest(TestCase):
  4256. """
  4257. Tests user CRUD functionality.
  4258. """
  4259. @classmethod
  4260. def setUpTestData(cls):
  4261. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4262. cls.adduser = User.objects.create_user(username='adduser', password='secret', is_staff=True)
  4263. cls.changeuser = User.objects.create_user(username='changeuser', password='secret', is_staff=True)
  4264. cls.s1 = Section.objects.create(name='Test section')
  4265. cls.a1 = Article.objects.create(
  4266. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  4267. )
  4268. cls.a2 = Article.objects.create(
  4269. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  4270. )
  4271. cls.a3 = Article.objects.create(
  4272. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  4273. )
  4274. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  4275. cls.per1 = Person.objects.create(name='John Mauchly', gender=1, alive=True)
  4276. cls.per2 = Person.objects.create(name='Grace Hopper', gender=1, alive=False)
  4277. cls.per3 = Person.objects.create(name='Guido van Rossum', gender=1, alive=True)
  4278. def setUp(self):
  4279. self.client.force_login(self.superuser)
  4280. def test_save_button(self):
  4281. user_count = User.objects.count()
  4282. response = self.client.post(reverse('admin:auth_user_add'), {
  4283. 'username': 'newuser',
  4284. 'password1': 'newpassword',
  4285. 'password2': 'newpassword',
  4286. })
  4287. new_user = User.objects.get(username='newuser')
  4288. self.assertRedirects(response, reverse('admin:auth_user_change', args=(new_user.pk,)))
  4289. self.assertEqual(User.objects.count(), user_count + 1)
  4290. self.assertTrue(new_user.has_usable_password())
  4291. def test_save_continue_editing_button(self):
  4292. user_count = User.objects.count()
  4293. response = self.client.post(reverse('admin:auth_user_add'), {
  4294. 'username': 'newuser',
  4295. 'password1': 'newpassword',
  4296. 'password2': 'newpassword',
  4297. '_continue': '1',
  4298. })
  4299. new_user = User.objects.get(username='newuser')
  4300. new_user_url = reverse('admin:auth_user_change', args=(new_user.pk,))
  4301. self.assertRedirects(response, new_user_url, fetch_redirect_response=False)
  4302. self.assertEqual(User.objects.count(), user_count + 1)
  4303. self.assertTrue(new_user.has_usable_password())
  4304. response = self.client.get(new_user_url)
  4305. self.assertContains(
  4306. response,
  4307. '<li class="success">The user "<a href="%s">'
  4308. '%s</a>" was added successfully. You may edit it again below.</li>'
  4309. % (new_user_url, new_user),
  4310. html=True,
  4311. )
  4312. def test_password_mismatch(self):
  4313. response = self.client.post(reverse('admin:auth_user_add'), {
  4314. 'username': 'newuser',
  4315. 'password1': 'newpassword',
  4316. 'password2': 'mismatch',
  4317. })
  4318. self.assertEqual(response.status_code, 200)
  4319. self.assertFormError(response, 'adminform', 'password', [])
  4320. self.assertFormError(response, 'adminform', 'password2', ["The two password fields didn't match."])
  4321. def test_user_fk_add_popup(self):
  4322. """User addition through a FK popup should return the appropriate JavaScript response."""
  4323. response = self.client.get(reverse('admin:admin_views_album_add'))
  4324. self.assertContains(response, reverse('admin:auth_user_add'))
  4325. self.assertContains(response, 'class="related-widget-wrapper-link add-related" id="add_id_owner"')
  4326. response = self.client.get(reverse('admin:auth_user_add') + '?_popup=1')
  4327. self.assertNotContains(response, 'name="_continue"')
  4328. self.assertNotContains(response, 'name="_addanother"')
  4329. data = {
  4330. 'username': 'newuser',
  4331. 'password1': 'newpassword',
  4332. 'password2': 'newpassword',
  4333. '_popup': '1',
  4334. '_save': '1',
  4335. }
  4336. response = self.client.post(reverse('admin:auth_user_add') + '?_popup=1', data, follow=True)
  4337. self.assertContains(response, '&quot;obj&quot;: &quot;newuser&quot;')
  4338. def test_user_fk_change_popup(self):
  4339. """User change through a FK popup should return the appropriate JavaScript response."""
  4340. response = self.client.get(reverse('admin:admin_views_album_add'))
  4341. self.assertContains(response, reverse('admin:auth_user_change', args=('__fk__',)))
  4342. self.assertContains(response, 'class="related-widget-wrapper-link change-related" id="change_id_owner"')
  4343. user = User.objects.get(username='changeuser')
  4344. url = reverse('admin:auth_user_change', args=(user.pk,)) + '?_popup=1'
  4345. response = self.client.get(url)
  4346. self.assertNotContains(response, 'name="_continue"')
  4347. self.assertNotContains(response, 'name="_addanother"')
  4348. data = {
  4349. 'username': 'newuser',
  4350. 'password1': 'newpassword',
  4351. 'password2': 'newpassword',
  4352. 'last_login_0': '2007-05-30',
  4353. 'last_login_1': '13:20:10',
  4354. 'date_joined_0': '2007-05-30',
  4355. 'date_joined_1': '13:20:10',
  4356. '_popup': '1',
  4357. '_save': '1',
  4358. }
  4359. response = self.client.post(url, data, follow=True)
  4360. self.assertContains(response, '&quot;obj&quot;: &quot;newuser&quot;')
  4361. self.assertContains(response, '&quot;action&quot;: &quot;change&quot;')
  4362. def test_user_fk_delete_popup(self):
  4363. """User deletion through a FK popup should return the appropriate JavaScript response."""
  4364. response = self.client.get(reverse('admin:admin_views_album_add'))
  4365. self.assertContains(response, reverse('admin:auth_user_delete', args=('__fk__',)))
  4366. self.assertContains(response, 'class="related-widget-wrapper-link change-related" id="change_id_owner"')
  4367. user = User.objects.get(username='changeuser')
  4368. url = reverse('admin:auth_user_delete', args=(user.pk,)) + '?_popup=1'
  4369. response = self.client.get(url)
  4370. self.assertEqual(response.status_code, 200)
  4371. data = {
  4372. 'post': 'yes',
  4373. '_popup': '1',
  4374. }
  4375. response = self.client.post(url, data, follow=True)
  4376. self.assertContains(response, '&quot;action&quot;: &quot;delete&quot;')
  4377. def test_save_add_another_button(self):
  4378. user_count = User.objects.count()
  4379. response = self.client.post(reverse('admin:auth_user_add'), {
  4380. 'username': 'newuser',
  4381. 'password1': 'newpassword',
  4382. 'password2': 'newpassword',
  4383. '_addanother': '1',
  4384. })
  4385. new_user = User.objects.order_by('-id')[0]
  4386. self.assertRedirects(response, reverse('admin:auth_user_add'))
  4387. self.assertEqual(User.objects.count(), user_count + 1)
  4388. self.assertTrue(new_user.has_usable_password())
  4389. def test_user_permission_performance(self):
  4390. u = User.objects.all()[0]
  4391. # Don't depend on a warm cache, see #17377.
  4392. ContentType.objects.clear_cache()
  4393. with self.assertNumQueries(10):
  4394. response = self.client.get(reverse('admin:auth_user_change', args=(u.pk,)))
  4395. self.assertEqual(response.status_code, 200)
  4396. def test_form_url_present_in_context(self):
  4397. u = User.objects.all()[0]
  4398. response = self.client.get(reverse('admin3:auth_user_password_change', args=(u.pk,)))
  4399. self.assertEqual(response.status_code, 200)
  4400. self.assertEqual(response.context['form_url'], 'pony')
  4401. @override_settings(ROOT_URLCONF='admin_views.urls')
  4402. class GroupAdminTest(TestCase):
  4403. """
  4404. Tests group CRUD functionality.
  4405. """
  4406. @classmethod
  4407. def setUpTestData(cls):
  4408. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4409. def setUp(self):
  4410. self.client.force_login(self.superuser)
  4411. def test_save_button(self):
  4412. group_count = Group.objects.count()
  4413. response = self.client.post(reverse('admin:auth_group_add'), {
  4414. 'name': 'newgroup',
  4415. })
  4416. Group.objects.order_by('-id')[0]
  4417. self.assertRedirects(response, reverse('admin:auth_group_changelist'))
  4418. self.assertEqual(Group.objects.count(), group_count + 1)
  4419. def test_group_permission_performance(self):
  4420. g = Group.objects.create(name="test_group")
  4421. # Ensure no queries are skipped due to cached content type for Group.
  4422. ContentType.objects.clear_cache()
  4423. with self.assertNumQueries(8):
  4424. response = self.client.get(reverse('admin:auth_group_change', args=(g.pk,)))
  4425. self.assertEqual(response.status_code, 200)
  4426. @override_settings(ROOT_URLCONF='admin_views.urls')
  4427. class CSSTest(TestCase):
  4428. @classmethod
  4429. def setUpTestData(cls):
  4430. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4431. cls.s1 = Section.objects.create(name='Test section')
  4432. cls.a1 = Article.objects.create(
  4433. content='<p>Middle content</p>', date=datetime.datetime(2008, 3, 18, 11, 54, 58), section=cls.s1
  4434. )
  4435. cls.a2 = Article.objects.create(
  4436. content='<p>Oldest content</p>', date=datetime.datetime(2000, 3, 18, 11, 54, 58), section=cls.s1
  4437. )
  4438. cls.a3 = Article.objects.create(
  4439. content='<p>Newest content</p>', date=datetime.datetime(2009, 3, 18, 11, 54, 58), section=cls.s1
  4440. )
  4441. cls.p1 = PrePopulatedPost.objects.create(title='A Long Title', published=True, slug='a-long-title')
  4442. def setUp(self):
  4443. self.client.force_login(self.superuser)
  4444. def test_field_prefix_css_classes(self):
  4445. """
  4446. Fields have a CSS class name with a 'field-' prefix.
  4447. """
  4448. response = self.client.get(reverse('admin:admin_views_post_add'))
  4449. # The main form
  4450. self.assertContains(response, 'class="form-row field-title"')
  4451. self.assertContains(response, 'class="form-row field-content"')
  4452. self.assertContains(response, 'class="form-row field-public"')
  4453. self.assertContains(response, 'class="form-row field-awesomeness_level"')
  4454. self.assertContains(response, 'class="form-row field-coolness"')
  4455. self.assertContains(response, 'class="form-row field-value"')
  4456. self.assertContains(response, 'class="form-row"') # The lambda function
  4457. # The tabular inline
  4458. self.assertContains(response, '<td class="field-url">')
  4459. self.assertContains(response, '<td class="field-posted">')
  4460. def test_index_css_classes(self):
  4461. """
  4462. CSS class names are used for each app and model on the admin index
  4463. pages (#17050).
  4464. """
  4465. # General index page
  4466. response = self.client.get(reverse('admin:index'))
  4467. self.assertContains(response, '<div class="app-admin_views module">')
  4468. self.assertContains(response, '<tr class="model-actor">')
  4469. self.assertContains(response, '<tr class="model-album">')
  4470. # App index page
  4471. response = self.client.get(reverse('admin:app_list', args=('admin_views',)))
  4472. self.assertContains(response, '<div class="app-admin_views module">')
  4473. self.assertContains(response, '<tr class="model-actor">')
  4474. self.assertContains(response, '<tr class="model-album">')
  4475. def test_app_model_in_form_body_class(self):
  4476. """
  4477. Ensure app and model tag are correctly read by change_form template
  4478. """
  4479. response = self.client.get(reverse('admin:admin_views_section_add'))
  4480. self.assertContains(response, '<body class=" app-admin_views model-section ')
  4481. def test_app_model_in_list_body_class(self):
  4482. """
  4483. Ensure app and model tag are correctly read by change_list template
  4484. """
  4485. response = self.client.get(reverse('admin:admin_views_section_changelist'))
  4486. self.assertContains(response, '<body class=" app-admin_views model-section ')
  4487. def test_app_model_in_delete_confirmation_body_class(self):
  4488. """
  4489. Ensure app and model tag are correctly read by delete_confirmation
  4490. template
  4491. """
  4492. response = self.client.get(reverse('admin:admin_views_section_delete', args=(self.s1.pk,)))
  4493. self.assertContains(response, '<body class=" app-admin_views model-section ')
  4494. def test_app_model_in_app_index_body_class(self):
  4495. """
  4496. Ensure app and model tag are correctly read by app_index template
  4497. """
  4498. response = self.client.get(reverse('admin:app_list', args=('admin_views',)))
  4499. self.assertContains(response, '<body class=" dashboard app-admin_views')
  4500. def test_app_model_in_delete_selected_confirmation_body_class(self):
  4501. """
  4502. Ensure app and model tag are correctly read by
  4503. delete_selected_confirmation template
  4504. """
  4505. action_data = {
  4506. ACTION_CHECKBOX_NAME: [self.s1.pk],
  4507. 'action': 'delete_selected',
  4508. 'index': 0,
  4509. }
  4510. response = self.client.post(reverse('admin:admin_views_section_changelist'), action_data)
  4511. self.assertContains(response, '<body class=" app-admin_views model-section ')
  4512. def test_changelist_field_classes(self):
  4513. """
  4514. Cells of the change list table should contain the field name in their class attribute
  4515. Refs #11195.
  4516. """
  4517. Podcast.objects.create(name="Django Dose", release_date=datetime.date.today())
  4518. response = self.client.get(reverse('admin:admin_views_podcast_changelist'))
  4519. self.assertContains(response, '<th class="field-name">')
  4520. self.assertContains(response, '<td class="field-release_date nowrap">')
  4521. self.assertContains(response, '<td class="action-checkbox">')
  4522. try:
  4523. import docutils
  4524. except ImportError:
  4525. docutils = None
  4526. @unittest.skipUnless(docutils, "no docutils installed.")
  4527. @override_settings(ROOT_URLCONF='admin_views.urls')
  4528. @modify_settings(INSTALLED_APPS={'append': ['django.contrib.admindocs', 'django.contrib.flatpages']})
  4529. class AdminDocsTest(TestCase):
  4530. @classmethod
  4531. def setUpTestData(cls):
  4532. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4533. def setUp(self):
  4534. self.client.force_login(self.superuser)
  4535. def test_tags(self):
  4536. response = self.client.get(reverse('django-admindocs-tags'))
  4537. # The builtin tag group exists
  4538. self.assertContains(response, "<h2>Built-in tags</h2>", count=2, html=True)
  4539. # A builtin tag exists in both the index and detail
  4540. self.assertContains(response, '<h3 id="built_in-autoescape">autoescape</h3>', html=True)
  4541. self.assertContains(response, '<li><a href="#built_in-autoescape">autoescape</a></li>', html=True)
  4542. # An app tag exists in both the index and detail
  4543. self.assertContains(response, '<h3 id="flatpages-get_flatpages">get_flatpages</h3>', html=True)
  4544. self.assertContains(response, '<li><a href="#flatpages-get_flatpages">get_flatpages</a></li>', html=True)
  4545. # The admin list tag group exists
  4546. self.assertContains(response, "<h2>admin_list</h2>", count=2, html=True)
  4547. # An admin list tag exists in both the index and detail
  4548. self.assertContains(response, '<h3 id="admin_list-admin_actions">admin_actions</h3>', html=True)
  4549. self.assertContains(response, '<li><a href="#admin_list-admin_actions">admin_actions</a></li>', html=True)
  4550. def test_filters(self):
  4551. response = self.client.get(reverse('django-admindocs-filters'))
  4552. # The builtin filter group exists
  4553. self.assertContains(response, "<h2>Built-in filters</h2>", count=2, html=True)
  4554. # A builtin filter exists in both the index and detail
  4555. self.assertContains(response, '<h3 id="built_in-add">add</h3>', html=True)
  4556. self.assertContains(response, '<li><a href="#built_in-add">add</a></li>', html=True)
  4557. @override_settings(
  4558. ROOT_URLCONF='admin_views.urls',
  4559. TEMPLATES=[{
  4560. 'BACKEND': 'django.template.backends.django.DjangoTemplates',
  4561. 'APP_DIRS': True,
  4562. 'OPTIONS': {
  4563. 'context_processors': [
  4564. 'django.template.context_processors.debug',
  4565. 'django.template.context_processors.request',
  4566. 'django.contrib.auth.context_processors.auth',
  4567. 'django.contrib.messages.context_processors.messages',
  4568. ],
  4569. },
  4570. }],
  4571. USE_I18N=False,
  4572. )
  4573. class ValidXHTMLTests(TestCase):
  4574. @classmethod
  4575. def setUpTestData(cls):
  4576. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4577. def setUp(self):
  4578. self.client.force_login(self.superuser)
  4579. def test_lang_name_present(self):
  4580. response = self.client.get(reverse('admin:app_list', args=('admin_views',)))
  4581. self.assertNotContains(response, ' lang=""')
  4582. self.assertNotContains(response, ' xml:lang=""')
  4583. @override_settings(ROOT_URLCONF='admin_views.urls', USE_THOUSAND_SEPARATOR=True, USE_L10N=True)
  4584. class DateHierarchyTests(TestCase):
  4585. @classmethod
  4586. def setUpTestData(cls):
  4587. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4588. def setUp(self):
  4589. self.client.force_login(self.superuser)
  4590. def assert_non_localized_year(self, response, year):
  4591. """
  4592. The year is not localized with USE_THOUSAND_SEPARATOR (#15234).
  4593. """
  4594. self.assertNotContains(response, formats.number_format(year))
  4595. def assert_contains_year_link(self, response, date):
  4596. self.assertContains(response, '?release_date__year=%d"' % (date.year,))
  4597. def assert_contains_month_link(self, response, date):
  4598. self.assertContains(
  4599. response, '?release_date__month=%d&amp;release_date__year=%d"' % (
  4600. date.month, date.year))
  4601. def assert_contains_day_link(self, response, date):
  4602. self.assertContains(
  4603. response, '?release_date__day=%d&amp;'
  4604. 'release_date__month=%d&amp;release_date__year=%d"' % (
  4605. date.day, date.month, date.year))
  4606. def test_empty(self):
  4607. """
  4608. No date hierarchy links display with empty changelist.
  4609. """
  4610. response = self.client.get(
  4611. reverse('admin:admin_views_podcast_changelist'))
  4612. self.assertNotContains(response, 'release_date__year=')
  4613. self.assertNotContains(response, 'release_date__month=')
  4614. self.assertNotContains(response, 'release_date__day=')
  4615. def test_single(self):
  4616. """
  4617. Single day-level date hierarchy appears for single object.
  4618. """
  4619. DATE = datetime.date(2000, 6, 30)
  4620. Podcast.objects.create(release_date=DATE)
  4621. url = reverse('admin:admin_views_podcast_changelist')
  4622. response = self.client.get(url)
  4623. self.assert_contains_day_link(response, DATE)
  4624. self.assert_non_localized_year(response, 2000)
  4625. def test_within_month(self):
  4626. """
  4627. day-level links appear for changelist within single month.
  4628. """
  4629. DATES = (datetime.date(2000, 6, 30),
  4630. datetime.date(2000, 6, 15),
  4631. datetime.date(2000, 6, 3))
  4632. for date in DATES:
  4633. Podcast.objects.create(release_date=date)
  4634. url = reverse('admin:admin_views_podcast_changelist')
  4635. response = self.client.get(url)
  4636. for date in DATES:
  4637. self.assert_contains_day_link(response, date)
  4638. self.assert_non_localized_year(response, 2000)
  4639. def test_within_year(self):
  4640. """
  4641. month-level links appear for changelist within single year.
  4642. """
  4643. DATES = (datetime.date(2000, 1, 30),
  4644. datetime.date(2000, 3, 15),
  4645. datetime.date(2000, 5, 3))
  4646. for date in DATES:
  4647. Podcast.objects.create(release_date=date)
  4648. url = reverse('admin:admin_views_podcast_changelist')
  4649. response = self.client.get(url)
  4650. # no day-level links
  4651. self.assertNotContains(response, 'release_date__day=')
  4652. for date in DATES:
  4653. self.assert_contains_month_link(response, date)
  4654. self.assert_non_localized_year(response, 2000)
  4655. def test_multiple_years(self):
  4656. """
  4657. year-level links appear for year-spanning changelist.
  4658. """
  4659. DATES = (datetime.date(2001, 1, 30),
  4660. datetime.date(2003, 3, 15),
  4661. datetime.date(2005, 5, 3))
  4662. for date in DATES:
  4663. Podcast.objects.create(release_date=date)
  4664. response = self.client.get(
  4665. reverse('admin:admin_views_podcast_changelist'))
  4666. # no day/month-level links
  4667. self.assertNotContains(response, 'release_date__day=')
  4668. self.assertNotContains(response, 'release_date__month=')
  4669. for date in DATES:
  4670. self.assert_contains_year_link(response, date)
  4671. # and make sure GET parameters still behave correctly
  4672. for date in DATES:
  4673. url = '%s?release_date__year=%d' % (
  4674. reverse('admin:admin_views_podcast_changelist'),
  4675. date.year)
  4676. response = self.client.get(url)
  4677. self.assert_contains_month_link(response, date)
  4678. self.assert_non_localized_year(response, 2000)
  4679. self.assert_non_localized_year(response, 2003)
  4680. self.assert_non_localized_year(response, 2005)
  4681. url = '%s?release_date__year=%d&release_date__month=%d' % (
  4682. reverse('admin:admin_views_podcast_changelist'),
  4683. date.year, date.month)
  4684. response = self.client.get(url)
  4685. self.assert_contains_day_link(response, date)
  4686. self.assert_non_localized_year(response, 2000)
  4687. self.assert_non_localized_year(response, 2003)
  4688. self.assert_non_localized_year(response, 2005)
  4689. def test_related_field(self):
  4690. questions_data = (
  4691. # (posted data, number of answers),
  4692. (datetime.date(2001, 1, 30), 0),
  4693. (datetime.date(2003, 3, 15), 1),
  4694. (datetime.date(2005, 5, 3), 2),
  4695. )
  4696. for date, answer_count in questions_data:
  4697. question = Question.objects.create(posted=date)
  4698. for i in range(answer_count):
  4699. question.answer_set.create()
  4700. response = self.client.get(reverse('admin:admin_views_answer_changelist'))
  4701. for date, answer_count in questions_data:
  4702. link = '?question__posted__year=%d"' % (date.year,)
  4703. if answer_count > 0:
  4704. self.assertContains(response, link)
  4705. else:
  4706. self.assertNotContains(response, link)
  4707. @override_settings(ROOT_URLCONF='admin_views.urls')
  4708. class AdminCustomSaveRelatedTests(TestCase):
  4709. """
  4710. One can easily customize the way related objects are saved.
  4711. Refs #16115.
  4712. """
  4713. @classmethod
  4714. def setUpTestData(cls):
  4715. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4716. def setUp(self):
  4717. self.client.force_login(self.superuser)
  4718. def test_should_be_able_to_edit_related_objects_on_add_view(self):
  4719. post = {
  4720. 'child_set-TOTAL_FORMS': '3',
  4721. 'child_set-INITIAL_FORMS': '0',
  4722. 'name': 'Josh Stone',
  4723. 'child_set-0-name': 'Paul',
  4724. 'child_set-1-name': 'Catherine',
  4725. }
  4726. self.client.post(reverse('admin:admin_views_parent_add'), post)
  4727. self.assertEqual(1, Parent.objects.count())
  4728. self.assertEqual(2, Child.objects.count())
  4729. children_names = list(Child.objects.order_by('name').values_list('name', flat=True))
  4730. self.assertEqual('Josh Stone', Parent.objects.latest('id').name)
  4731. self.assertEqual(['Catherine Stone', 'Paul Stone'], children_names)
  4732. def test_should_be_able_to_edit_related_objects_on_change_view(self):
  4733. parent = Parent.objects.create(name='Josh Stone')
  4734. paul = Child.objects.create(parent=parent, name='Paul')
  4735. catherine = Child.objects.create(parent=parent, name='Catherine')
  4736. post = {
  4737. 'child_set-TOTAL_FORMS': '5',
  4738. 'child_set-INITIAL_FORMS': '2',
  4739. 'name': 'Josh Stone',
  4740. 'child_set-0-name': 'Paul',
  4741. 'child_set-0-id': paul.id,
  4742. 'child_set-1-name': 'Catherine',
  4743. 'child_set-1-id': catherine.id,
  4744. }
  4745. self.client.post(reverse('admin:admin_views_parent_change', args=(parent.id,)), post)
  4746. children_names = list(Child.objects.order_by('name').values_list('name', flat=True))
  4747. self.assertEqual('Josh Stone', Parent.objects.latest('id').name)
  4748. self.assertEqual(['Catherine Stone', 'Paul Stone'], children_names)
  4749. def test_should_be_able_to_edit_related_objects_on_changelist_view(self):
  4750. parent = Parent.objects.create(name='Josh Rock')
  4751. Child.objects.create(parent=parent, name='Paul')
  4752. Child.objects.create(parent=parent, name='Catherine')
  4753. post = {
  4754. 'form-TOTAL_FORMS': '1',
  4755. 'form-INITIAL_FORMS': '1',
  4756. 'form-MAX_NUM_FORMS': '0',
  4757. 'form-0-id': parent.id,
  4758. 'form-0-name': 'Josh Stone',
  4759. '_save': 'Save'
  4760. }
  4761. self.client.post(reverse('admin:admin_views_parent_changelist'), post)
  4762. children_names = list(Child.objects.order_by('name').values_list('name', flat=True))
  4763. self.assertEqual('Josh Stone', Parent.objects.latest('id').name)
  4764. self.assertEqual(['Catherine Stone', 'Paul Stone'], children_names)
  4765. @override_settings(ROOT_URLCONF='admin_views.urls')
  4766. class AdminViewLogoutTests(TestCase):
  4767. @classmethod
  4768. def setUpTestData(cls):
  4769. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4770. def test_logout(self):
  4771. self.client.force_login(self.superuser)
  4772. response = self.client.get(reverse('admin:logout'))
  4773. self.assertEqual(response.status_code, 200)
  4774. self.assertTemplateUsed(response, 'registration/logged_out.html')
  4775. self.assertEqual(response.request['PATH_INFO'], reverse('admin:logout'))
  4776. self.assertFalse(response.context['has_permission'])
  4777. self.assertNotContains(response, 'user-tools') # user-tools div shouldn't visible.
  4778. def test_client_logout_url_can_be_used_to_login(self):
  4779. response = self.client.get(reverse('admin:logout'))
  4780. self.assertEqual(response.status_code, 302) # we should be redirected to the login page.
  4781. # follow the redirect and test results.
  4782. response = self.client.get(reverse('admin:logout'), follow=True)
  4783. self.assertEqual(response.status_code, 200)
  4784. self.assertTemplateUsed(response, 'admin/login.html')
  4785. self.assertEqual(response.request['PATH_INFO'], reverse('admin:login'))
  4786. self.assertContains(response, '<input type="hidden" name="next" value="%s">' % reverse('admin:index'))
  4787. @override_settings(ROOT_URLCONF='admin_views.urls')
  4788. class AdminUserMessageTest(TestCase):
  4789. @classmethod
  4790. def setUpTestData(cls):
  4791. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4792. def setUp(self):
  4793. self.client.force_login(self.superuser)
  4794. def send_message(self, level):
  4795. """
  4796. Helper that sends a post to the dummy test methods and asserts that a
  4797. message with the level has appeared in the response.
  4798. """
  4799. action_data = {
  4800. ACTION_CHECKBOX_NAME: [1],
  4801. 'action': 'message_%s' % level,
  4802. 'index': 0,
  4803. }
  4804. response = self.client.post(reverse('admin:admin_views_usermessenger_changelist'),
  4805. action_data, follow=True)
  4806. self.assertContains(response,
  4807. '<li class="%s">Test %s</li>' % (level, level),
  4808. html=True)
  4809. @override_settings(MESSAGE_LEVEL=10) # Set to DEBUG for this request
  4810. def test_message_debug(self):
  4811. self.send_message('debug')
  4812. def test_message_info(self):
  4813. self.send_message('info')
  4814. def test_message_success(self):
  4815. self.send_message('success')
  4816. def test_message_warning(self):
  4817. self.send_message('warning')
  4818. def test_message_error(self):
  4819. self.send_message('error')
  4820. def test_message_extra_tags(self):
  4821. action_data = {
  4822. ACTION_CHECKBOX_NAME: [1],
  4823. 'action': 'message_extra_tags',
  4824. 'index': 0,
  4825. }
  4826. response = self.client.post(reverse('admin:admin_views_usermessenger_changelist'),
  4827. action_data, follow=True)
  4828. self.assertContains(response,
  4829. '<li class="extra_tag info">Test tags</li>',
  4830. html=True)
  4831. @override_settings(ROOT_URLCONF='admin_views.urls')
  4832. class AdminKeepChangeListFiltersTests(TestCase):
  4833. admin_site = site
  4834. @classmethod
  4835. def setUpTestData(cls):
  4836. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  4837. cls.joepublicuser = User.objects.create_user(username='joepublic', password='secret')
  4838. def setUp(self):
  4839. self.client.force_login(self.superuser)
  4840. def assertURLEqual(self, url1, url2):
  4841. """
  4842. Assert that two URLs are equal despite the ordering
  4843. of their querystring. Refs #22360.
  4844. """
  4845. parsed_url1 = urlparse(url1)
  4846. path1 = parsed_url1.path
  4847. parsed_qs1 = dict(parse_qsl(parsed_url1.query))
  4848. parsed_url2 = urlparse(url2)
  4849. path2 = parsed_url2.path
  4850. parsed_qs2 = dict(parse_qsl(parsed_url2.query))
  4851. for parsed_qs in [parsed_qs1, parsed_qs2]:
  4852. if '_changelist_filters' in parsed_qs:
  4853. changelist_filters = parsed_qs['_changelist_filters']
  4854. parsed_filters = dict(parse_qsl(changelist_filters))
  4855. parsed_qs['_changelist_filters'] = parsed_filters
  4856. self.assertEqual(path1, path2)
  4857. self.assertEqual(parsed_qs1, parsed_qs2)
  4858. def test_assert_url_equal(self):
  4859. # Test equality.
  4860. change_user_url = reverse('admin:auth_user_change', args=(self.joepublicuser.pk,))
  4861. self.assertURLEqual(
  4862. 'http://testserver{}?_changelist_filters=is_staff__exact%3D0%26is_superuser__exact%3D0'.format(
  4863. change_user_url
  4864. ),
  4865. 'http://testserver{}?_changelist_filters=is_staff__exact%3D0%26is_superuser__exact%3D0'.format(
  4866. change_user_url
  4867. )
  4868. )
  4869. # Test inequality.
  4870. with self.assertRaises(AssertionError):
  4871. self.assertURLEqual(
  4872. 'http://testserver{}?_changelist_filters=is_staff__exact%3D0%26is_superuser__exact%3D0'.format(
  4873. change_user_url
  4874. ),
  4875. 'http://testserver{}?_changelist_filters=is_staff__exact%3D1%26is_superuser__exact%3D1'.format(
  4876. change_user_url
  4877. )
  4878. )
  4879. # Ignore scheme and host.
  4880. self.assertURLEqual(
  4881. 'http://testserver{}?_changelist_filters=is_staff__exact%3D0%26is_superuser__exact%3D0'.format(
  4882. change_user_url
  4883. ),
  4884. '{}?_changelist_filters=is_staff__exact%3D0%26is_superuser__exact%3D0'.format(change_user_url)
  4885. )
  4886. # Ignore ordering of querystring.
  4887. self.assertURLEqual(
  4888. '{}?is_staff__exact=0&is_superuser__exact=0'.format(reverse('admin:auth_user_changelist')),
  4889. '{}?is_superuser__exact=0&is_staff__exact=0'.format(reverse('admin:auth_user_changelist'))
  4890. )
  4891. # Ignore ordering of _changelist_filters.
  4892. self.assertURLEqual(
  4893. '{}?_changelist_filters=is_staff__exact%3D0%26is_superuser__exact%3D0'.format(change_user_url),
  4894. '{}?_changelist_filters=is_superuser__exact%3D0%26is_staff__exact%3D0'.format(change_user_url)
  4895. )
  4896. def get_changelist_filters(self):
  4897. return {
  4898. 'is_superuser__exact': 0,
  4899. 'is_staff__exact': 0,
  4900. }
  4901. def get_changelist_filters_querystring(self):
  4902. return urlencode(self.get_changelist_filters())
  4903. def get_preserved_filters_querystring(self):
  4904. return urlencode({
  4905. '_changelist_filters': self.get_changelist_filters_querystring()
  4906. })
  4907. def get_sample_user_id(self):
  4908. return self.joepublicuser.pk
  4909. def get_changelist_url(self):
  4910. return '%s?%s' % (
  4911. reverse('admin:auth_user_changelist',
  4912. current_app=self.admin_site.name),
  4913. self.get_changelist_filters_querystring(),
  4914. )
  4915. def get_add_url(self):
  4916. return '%s?%s' % (
  4917. reverse('admin:auth_user_add',
  4918. current_app=self.admin_site.name),
  4919. self.get_preserved_filters_querystring(),
  4920. )
  4921. def get_change_url(self, user_id=None):
  4922. if user_id is None:
  4923. user_id = self.get_sample_user_id()
  4924. return "%s?%s" % (
  4925. reverse('admin:auth_user_change', args=(user_id,),
  4926. current_app=self.admin_site.name),
  4927. self.get_preserved_filters_querystring(),
  4928. )
  4929. def get_history_url(self, user_id=None):
  4930. if user_id is None:
  4931. user_id = self.get_sample_user_id()
  4932. return "%s?%s" % (
  4933. reverse('admin:auth_user_history', args=(user_id,),
  4934. current_app=self.admin_site.name),
  4935. self.get_preserved_filters_querystring(),
  4936. )
  4937. def get_delete_url(self, user_id=None):
  4938. if user_id is None:
  4939. user_id = self.get_sample_user_id()
  4940. return "%s?%s" % (
  4941. reverse('admin:auth_user_delete', args=(user_id,),
  4942. current_app=self.admin_site.name),
  4943. self.get_preserved_filters_querystring(),
  4944. )
  4945. def test_changelist_view(self):
  4946. response = self.client.get(self.get_changelist_url())
  4947. self.assertEqual(response.status_code, 200)
  4948. # Check the `change_view` link has the correct querystring.
  4949. detail_link = re.search(
  4950. '<a href="(.*?)">{}</a>'.format(self.joepublicuser.username),
  4951. response.content.decode()
  4952. )
  4953. self.assertURLEqual(detail_link.group(1), self.get_change_url())
  4954. def test_change_view(self):
  4955. # Get the `change_view`.
  4956. response = self.client.get(self.get_change_url())
  4957. self.assertEqual(response.status_code, 200)
  4958. # Check the form action.
  4959. form_action = re.search(
  4960. '<form action="(.*?)" method="post" id="user_form".*?>',
  4961. response.content.decode()
  4962. )
  4963. self.assertURLEqual(form_action.group(1), '?%s' % self.get_preserved_filters_querystring())
  4964. # Check the history link.
  4965. history_link = re.search(
  4966. '<a href="(.*?)" class="historylink">History</a>',
  4967. response.content.decode()
  4968. )
  4969. self.assertURLEqual(history_link.group(1), self.get_history_url())
  4970. # Check the delete link.
  4971. delete_link = re.search(
  4972. '<a href="(.*?)" class="deletelink">Delete</a>',
  4973. response.content.decode()
  4974. )
  4975. self.assertURLEqual(delete_link.group(1), self.get_delete_url())
  4976. # Test redirect on "Save".
  4977. post_data = {
  4978. 'username': 'joepublic',
  4979. 'last_login_0': '2007-05-30',
  4980. 'last_login_1': '13:20:10',
  4981. 'date_joined_0': '2007-05-30',
  4982. 'date_joined_1': '13:20:10',
  4983. }
  4984. post_data['_save'] = 1
  4985. response = self.client.post(self.get_change_url(), data=post_data)
  4986. self.assertEqual(response.status_code, 302)
  4987. self.assertURLEqual(
  4988. response.url,
  4989. self.get_changelist_url()
  4990. )
  4991. post_data.pop('_save')
  4992. # Test redirect on "Save and continue".
  4993. post_data['_continue'] = 1
  4994. response = self.client.post(self.get_change_url(), data=post_data)
  4995. self.assertEqual(response.status_code, 302)
  4996. self.assertURLEqual(
  4997. response.url,
  4998. self.get_change_url()
  4999. )
  5000. post_data.pop('_continue')
  5001. # Test redirect on "Save and add new".
  5002. post_data['_addanother'] = 1
  5003. response = self.client.post(self.get_change_url(), data=post_data)
  5004. self.assertEqual(response.status_code, 302)
  5005. self.assertURLEqual(
  5006. response.url,
  5007. self.get_add_url()
  5008. )
  5009. post_data.pop('_addanother')
  5010. def test_add_view(self):
  5011. # Get the `add_view`.
  5012. response = self.client.get(self.get_add_url())
  5013. self.assertEqual(response.status_code, 200)
  5014. # Check the form action.
  5015. form_action = re.search(
  5016. '<form action="(.*?)" method="post" id="user_form".*?>',
  5017. response.content.decode()
  5018. )
  5019. self.assertURLEqual(form_action.group(1), '?%s' % self.get_preserved_filters_querystring())
  5020. post_data = {
  5021. 'username': 'dummy',
  5022. 'password1': 'test',
  5023. 'password2': 'test',
  5024. }
  5025. # Test redirect on "Save".
  5026. post_data['_save'] = 1
  5027. response = self.client.post(self.get_add_url(), data=post_data)
  5028. self.assertEqual(response.status_code, 302)
  5029. self.assertURLEqual(
  5030. response.url,
  5031. self.get_change_url(User.objects.get(username='dummy').pk)
  5032. )
  5033. post_data.pop('_save')
  5034. # Test redirect on "Save and continue".
  5035. post_data['username'] = 'dummy2'
  5036. post_data['_continue'] = 1
  5037. response = self.client.post(self.get_add_url(), data=post_data)
  5038. self.assertEqual(response.status_code, 302)
  5039. self.assertURLEqual(
  5040. response.url,
  5041. self.get_change_url(User.objects.get(username='dummy2').pk)
  5042. )
  5043. post_data.pop('_continue')
  5044. # Test redirect on "Save and add new".
  5045. post_data['username'] = 'dummy3'
  5046. post_data['_addanother'] = 1
  5047. response = self.client.post(self.get_add_url(), data=post_data)
  5048. self.assertEqual(response.status_code, 302)
  5049. self.assertURLEqual(
  5050. response.url,
  5051. self.get_add_url()
  5052. )
  5053. post_data.pop('_addanother')
  5054. def test_delete_view(self):
  5055. # Test redirect on "Delete".
  5056. response = self.client.post(self.get_delete_url(), {'post': 'yes'})
  5057. self.assertEqual(response.status_code, 302)
  5058. self.assertURLEqual(
  5059. response.url,
  5060. self.get_changelist_url()
  5061. )
  5062. def test_url_prefix(self):
  5063. context = {
  5064. 'preserved_filters': self.get_preserved_filters_querystring(),
  5065. 'opts': User._meta,
  5066. }
  5067. prefixes = ('', '/prefix/', '/後台/')
  5068. for prefix in prefixes:
  5069. with self.subTest(prefix=prefix), override_script_prefix(prefix):
  5070. url = reverse('admin:auth_user_changelist', current_app=self.admin_site.name)
  5071. self.assertURLEqual(
  5072. self.get_changelist_url(),
  5073. add_preserved_filters(context, url),
  5074. )
  5075. class NamespacedAdminKeepChangeListFiltersTests(AdminKeepChangeListFiltersTests):
  5076. admin_site = site2
  5077. @override_settings(ROOT_URLCONF='admin_views.urls')
  5078. class TestLabelVisibility(TestCase):
  5079. """ #11277 -Labels of hidden fields in admin were not hidden. """
  5080. @classmethod
  5081. def setUpTestData(cls):
  5082. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  5083. def setUp(self):
  5084. self.client.force_login(self.superuser)
  5085. def test_all_fields_visible(self):
  5086. response = self.client.get(reverse('admin:admin_views_emptymodelvisible_add'))
  5087. self.assert_fieldline_visible(response)
  5088. self.assert_field_visible(response, 'first')
  5089. self.assert_field_visible(response, 'second')
  5090. def test_all_fields_hidden(self):
  5091. response = self.client.get(reverse('admin:admin_views_emptymodelhidden_add'))
  5092. self.assert_fieldline_hidden(response)
  5093. self.assert_field_hidden(response, 'first')
  5094. self.assert_field_hidden(response, 'second')
  5095. def test_mixin(self):
  5096. response = self.client.get(reverse('admin:admin_views_emptymodelmixin_add'))
  5097. self.assert_fieldline_visible(response)
  5098. self.assert_field_hidden(response, 'first')
  5099. self.assert_field_visible(response, 'second')
  5100. def assert_field_visible(self, response, field_name):
  5101. self.assertContains(response, '<div class="fieldBox field-%s">' % field_name)
  5102. def assert_field_hidden(self, response, field_name):
  5103. self.assertContains(response, '<div class="fieldBox field-%s hidden">' % field_name)
  5104. def assert_fieldline_visible(self, response):
  5105. self.assertContains(response, '<div class="form-row field-first field-second">')
  5106. def assert_fieldline_hidden(self, response):
  5107. self.assertContains(response, '<div class="form-row hidden')
  5108. @override_settings(ROOT_URLCONF='admin_views.urls')
  5109. class AdminViewOnSiteTests(TestCase):
  5110. @classmethod
  5111. def setUpTestData(cls):
  5112. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  5113. cls.s1 = State.objects.create(name='New York')
  5114. cls.s2 = State.objects.create(name='Illinois')
  5115. cls.s3 = State.objects.create(name='California')
  5116. cls.c1 = City.objects.create(state=cls.s1, name='New York')
  5117. cls.c2 = City.objects.create(state=cls.s2, name='Chicago')
  5118. cls.c3 = City.objects.create(state=cls.s3, name='San Francisco')
  5119. cls.r1 = Restaurant.objects.create(city=cls.c1, name='Italian Pizza')
  5120. cls.r2 = Restaurant.objects.create(city=cls.c1, name='Boulevard')
  5121. cls.r3 = Restaurant.objects.create(city=cls.c2, name='Chinese Dinner')
  5122. cls.r4 = Restaurant.objects.create(city=cls.c2, name='Angels')
  5123. cls.r5 = Restaurant.objects.create(city=cls.c2, name='Take Away')
  5124. cls.r6 = Restaurant.objects.create(city=cls.c3, name='The Unknown Restaurant')
  5125. cls.w1 = Worker.objects.create(work_at=cls.r1, name='Mario', surname='Rossi')
  5126. cls.w2 = Worker.objects.create(work_at=cls.r1, name='Antonio', surname='Bianchi')
  5127. cls.w3 = Worker.objects.create(work_at=cls.r1, name='John', surname='Doe')
  5128. def setUp(self):
  5129. self.client.force_login(self.superuser)
  5130. def test_add_view_form_and_formsets_run_validation(self):
  5131. """
  5132. Issue #20522
  5133. Verifying that if the parent form fails validation, the inlines also
  5134. run validation even if validation is contingent on parent form data.
  5135. Also, assertFormError() and assertFormsetError() is usable for admin
  5136. forms and formsets.
  5137. """
  5138. # The form validation should fail because 'some_required_info' is
  5139. # not included on the parent form, and the family_name of the parent
  5140. # does not match that of the child
  5141. post_data = {"family_name": "Test1",
  5142. "dependentchild_set-TOTAL_FORMS": "1",
  5143. "dependentchild_set-INITIAL_FORMS": "0",
  5144. "dependentchild_set-MAX_NUM_FORMS": "1",
  5145. "dependentchild_set-0-id": "",
  5146. "dependentchild_set-0-parent": "",
  5147. "dependentchild_set-0-family_name": "Test2"}
  5148. response = self.client.post(reverse('admin:admin_views_parentwithdependentchildren_add'),
  5149. post_data)
  5150. self.assertFormError(response, 'adminform', 'some_required_info', ['This field is required.'])
  5151. msg = "The form 'adminform' in context 0 does not contain the non-field error 'Error'"
  5152. with self.assertRaisesMessage(AssertionError, msg):
  5153. self.assertFormError(response, 'adminform', None, ['Error'])
  5154. self.assertFormsetError(
  5155. response, 'inline_admin_formset', 0, None,
  5156. ['Children must share a family name with their parents in this contrived test case']
  5157. )
  5158. msg = "The formset 'inline_admin_formset' in context 10 does not contain any non-form errors."
  5159. with self.assertRaisesMessage(AssertionError, msg):
  5160. self.assertFormsetError(response, 'inline_admin_formset', None, None, ['Error'])
  5161. def test_change_view_form_and_formsets_run_validation(self):
  5162. """
  5163. Issue #20522
  5164. Verifying that if the parent form fails validation, the inlines also
  5165. run validation even if validation is contingent on parent form data
  5166. """
  5167. pwdc = ParentWithDependentChildren.objects.create(some_required_info=6,
  5168. family_name="Test1")
  5169. # The form validation should fail because 'some_required_info' is
  5170. # not included on the parent form, and the family_name of the parent
  5171. # does not match that of the child
  5172. post_data = {"family_name": "Test2",
  5173. "dependentchild_set-TOTAL_FORMS": "1",
  5174. "dependentchild_set-INITIAL_FORMS": "0",
  5175. "dependentchild_set-MAX_NUM_FORMS": "1",
  5176. "dependentchild_set-0-id": "",
  5177. "dependentchild_set-0-parent": str(pwdc.id),
  5178. "dependentchild_set-0-family_name": "Test1"}
  5179. response = self.client.post(
  5180. reverse('admin:admin_views_parentwithdependentchildren_change', args=(pwdc.id,)), post_data
  5181. )
  5182. self.assertFormError(response, 'adminform', 'some_required_info', ['This field is required.'])
  5183. self.assertFormsetError(
  5184. response, 'inline_admin_formset', 0, None,
  5185. ['Children must share a family name with their parents in this contrived test case']
  5186. )
  5187. def test_check(self):
  5188. "The view_on_site value is either a boolean or a callable"
  5189. try:
  5190. admin = CityAdmin(City, AdminSite())
  5191. CityAdmin.view_on_site = True
  5192. self.assertEqual(admin.check(), [])
  5193. CityAdmin.view_on_site = False
  5194. self.assertEqual(admin.check(), [])
  5195. CityAdmin.view_on_site = lambda obj: obj.get_absolute_url()
  5196. self.assertEqual(admin.check(), [])
  5197. CityAdmin.view_on_site = []
  5198. self.assertEqual(admin.check(), [
  5199. Error(
  5200. "The value of 'view_on_site' must be a callable or a boolean value.",
  5201. obj=CityAdmin,
  5202. id='admin.E025',
  5203. ),
  5204. ])
  5205. finally:
  5206. # Restore the original values for the benefit of other tests.
  5207. CityAdmin.view_on_site = True
  5208. def test_false(self):
  5209. "The 'View on site' button is not displayed if view_on_site is False"
  5210. response = self.client.get(reverse('admin:admin_views_restaurant_change', args=(self.r1.pk,)))
  5211. content_type_pk = ContentType.objects.get_for_model(Restaurant).pk
  5212. self.assertNotContains(response, reverse('admin:view_on_site', args=(content_type_pk, 1)))
  5213. def test_true(self):
  5214. "The default behavior is followed if view_on_site is True"
  5215. response = self.client.get(reverse('admin:admin_views_city_change', args=(self.c1.pk,)))
  5216. content_type_pk = ContentType.objects.get_for_model(City).pk
  5217. self.assertContains(response, reverse('admin:view_on_site', args=(content_type_pk, self.c1.pk)))
  5218. def test_callable(self):
  5219. "The right link is displayed if view_on_site is a callable"
  5220. response = self.client.get(reverse('admin:admin_views_worker_change', args=(self.w1.pk,)))
  5221. self.assertContains(response, '"/worker/%s/%s/"' % (self.w1.surname, self.w1.name))
  5222. def test_missing_get_absolute_url(self):
  5223. "None is returned if model doesn't have get_absolute_url"
  5224. model_admin = ModelAdmin(Worker, None)
  5225. self.assertIsNone(model_admin.get_view_on_site_url(Worker()))
  5226. @override_settings(ROOT_URLCONF='admin_views.urls')
  5227. class InlineAdminViewOnSiteTest(TestCase):
  5228. @classmethod
  5229. def setUpTestData(cls):
  5230. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  5231. cls.s1 = State.objects.create(name='New York')
  5232. cls.s2 = State.objects.create(name='Illinois')
  5233. cls.s3 = State.objects.create(name='California')
  5234. cls.c1 = City.objects.create(state=cls.s1, name='New York')
  5235. cls.c2 = City.objects.create(state=cls.s2, name='Chicago')
  5236. cls.c3 = City.objects.create(state=cls.s3, name='San Francisco')
  5237. cls.r1 = Restaurant.objects.create(city=cls.c1, name='Italian Pizza')
  5238. cls.r2 = Restaurant.objects.create(city=cls.c1, name='Boulevard')
  5239. cls.r3 = Restaurant.objects.create(city=cls.c2, name='Chinese Dinner')
  5240. cls.r4 = Restaurant.objects.create(city=cls.c2, name='Angels')
  5241. cls.r5 = Restaurant.objects.create(city=cls.c2, name='Take Away')
  5242. cls.r6 = Restaurant.objects.create(city=cls.c3, name='The Unknown Restaurant')
  5243. cls.w1 = Worker.objects.create(work_at=cls.r1, name='Mario', surname='Rossi')
  5244. cls.w2 = Worker.objects.create(work_at=cls.r1, name='Antonio', surname='Bianchi')
  5245. cls.w3 = Worker.objects.create(work_at=cls.r1, name='John', surname='Doe')
  5246. def setUp(self):
  5247. self.client.force_login(self.superuser)
  5248. def test_false(self):
  5249. "The 'View on site' button is not displayed if view_on_site is False"
  5250. response = self.client.get(reverse('admin:admin_views_state_change', args=(self.s1.pk,)))
  5251. content_type_pk = ContentType.objects.get_for_model(City).pk
  5252. self.assertNotContains(response, reverse('admin:view_on_site', args=(content_type_pk, self.c1.pk)))
  5253. def test_true(self):
  5254. "The 'View on site' button is displayed if view_on_site is True"
  5255. response = self.client.get(reverse('admin:admin_views_city_change', args=(self.c1.pk,)))
  5256. content_type_pk = ContentType.objects.get_for_model(Restaurant).pk
  5257. self.assertContains(response, reverse('admin:view_on_site', args=(content_type_pk, self.r1.pk)))
  5258. def test_callable(self):
  5259. "The right link is displayed if view_on_site is a callable"
  5260. response = self.client.get(reverse('admin:admin_views_restaurant_change', args=(self.r1.pk,)))
  5261. self.assertContains(response, '"/worker_inline/%s/%s/"' % (self.w1.surname, self.w1.name))
  5262. @override_settings(ROOT_URLCONF='admin_views.urls')
  5263. class GetFormsetsWithInlinesArgumentTest(TestCase):
  5264. """
  5265. #23934 - When adding a new model instance in the admin, the 'obj' argument
  5266. of get_formsets_with_inlines() should be None. When changing, it should be
  5267. equal to the existing model instance.
  5268. The GetFormsetsArgumentCheckingAdmin ModelAdmin throws an exception
  5269. if obj is not None during add_view or obj is None during change_view.
  5270. """
  5271. @classmethod
  5272. def setUpTestData(cls):
  5273. cls.superuser = User.objects.create_superuser(username='super', password='secret', email='super@example.com')
  5274. def setUp(self):
  5275. self.client.force_login(self.superuser)
  5276. def test_explicitly_provided_pk(self):
  5277. post_data = {'name': '1'}
  5278. response = self.client.post(reverse('admin:admin_views_explicitlyprovidedpk_add'), post_data)
  5279. self.assertEqual(response.status_code, 302)
  5280. post_data = {'name': '2'}
  5281. response = self.client.post(reverse('admin:admin_views_explicitlyprovidedpk_change', args=(1,)), post_data)
  5282. self.assertEqual(response.status_code, 302)
  5283. def test_implicitly_generated_pk(self):
  5284. post_data = {'name': '1'}
  5285. response = self.client.post(reverse('admin:admin_views_implicitlygeneratedpk_add'), post_data)
  5286. self.assertEqual(response.status_code, 302)
  5287. post_data = {'name': '2'}
  5288. response = self.client.post(reverse('admin:admin_views_implicitlygeneratedpk_change', args=(1,)), post_data)
  5289. self.assertEqual(response.status_code, 302)