Produits Entr'ouvert » w.c.s.

def test_formdef_submit_only_one(pub, local_user):

    Role.wipe()

    role = Role(name='test')

    role.store()

    local_user.roles = [role.id]

    local_user.store()

    FormDef.wipe()

    formdef = FormDef()

    formdef.name = 'test'

    formdef.only_allow_one = True

    formdef.fields = [fields.StringField(id='0', label='foobar')]

    formdef.store()

    data_class = formdef.data_class()

    signed_url = sign_url('http://example.net/api/formdefs/test/submit' +

            '?format=json&orig=coucou&email=%s' % urllib.quote(local_user.email), '1234')

    url = signed_url[len('http://example.net'):]

    resp = get_app(pub).post_json(url, {'data': {}})

    assert data_class.get(resp.json['data']['id']).user_id == str(local_user.id)

    assert data_class.count() == 1

    resp = get_app(pub).post_json(url, {'data': {}}, status=403)

    assert resp.json['err'] == 1

    assert resp.json['err_desc'] == 'only one formdata by user is allowed'

    formdata = data_class.select()[0]

    formdata.user_id = '1000' # change owner

    formdata.store()

    resp = get_app(pub).post_json(url, {'data': {}}, status=200)

    assert data_class.get(resp.json['data']['id']).user_id == str(local_user.id)

    assert data_class.count() == 2

        if self.formdef.only_allow_one and formdata.user_id:

            user_id = formdata.user_id

            user_forms = self.formdef.data_class().get_with_indexed_value('user_id', user_id)

            if user_forms:

                raise AccessForbiddenError('only one formdata by user is allowed')