Produits Entr'ouvert » Authentic 2

# authentic2 - versatile identity manager

# Copyright (C) 2010-2019 Entr'ouvert

#

# This program is free software: you can redistribute it and/or modify it

# under the terms of the GNU Affero General Public License as published

# by the Free Software Foundation, either version 3 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU Affero General Public License for more details.

#

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from collections import OrderedDict

from django import forms

class LockedFieldFormMixin(object):

    def __init__(self, *args, **kwargs):

        super(LockedFieldFormMixin, self).__init__(*args, **kwargs)

        self.__lock_fields()

    def __lock_fields(self):

        # Locked fields are modified to use a read-only TextInput

        # widget remapped to a name which will be ignored by Form

        # implementation

        locked_fields = {}

        for name in self.fields:

            if not self.is_field_locked(name):

                continue

            field = self.fields[name]

            initial = self.initial[name]

            try:

                choices = field.choices

            except AttributeError:

                initial = field.widget.format_value(initial)

            else:

                for key, label in choices:

                    if initial == key:

                        initial = label

                        break

            locked_fields[name] = forms.CharField(

                label=field.label,

                help_text=field.help_text,

                initial=initial,

                widget=forms.TextInput(attrs={'readonly': ''}))

        if not locked_fields:

            return

        new_fields = OrderedDict()

        for name in self.fields:

            if name in locked_fields:

                new_fields[name + '@disabled'] = locked_fields[name]

            else:

                new_fields[name] = self.fields[name]

        self.fields = new_fields

    def is_field_locked(self, name):

        raise NotImplementedError

from collections import OrderedDict

from .mixins import LockedFieldFormMixin

class BaseUserForm(LockedFieldFormMixin, forms.ModelForm):

        instance = kwargs.get('instance')

        # extended attributes are not model fields, their initial value must be

        # explicitely defined

        self.atvs = []

        self.locked_fields = set()

        if instance:

            self.atvs = models.AttributeValue.objects.select_related('attribute').with_owner(instance)

            for atv in self.atvs:

                name = atv.attribute.name

                if name in self.declared_fields:

                    initial[name] = atv.to_python()

                # helper data for LockedFieldFormMixin

                if atv.verified:

                    self.locked_fields.add(name)

    def is_field_locked(self, name):

        # helper method for LockedFieldFormMixin

        return name in self.locked_fields

        'csrfmiddlewaretoken': resp.form['csrfmiddlewaretoken'].value,

        'edit-profile-first_name': resp.form['edit-profile-first_name'].value,

        'edit-profile-last_name': resp.form['edit-profile-last_name'].value,

        'edit-profile-phone': '1234'

    }, status=302)

    assert 'edit-profile-phone' not in resp.form.fields

    assert 'readonly' in resp.form['edit-profile-phone@disabled'].attrs

    assert 'edit-profile-phone@disabled' not in resp

def test_account_edit_locked_title(app, simple_user):

    Attribute.objects.create(

        name='title', label='title',

        kind='title', user_visible=True, user_editable=True)

    simple_user.attributes.title = 'Monsieur'

    utils.login(app, simple_user)

    url = reverse('profile_edit')

    response = app.get(url, status=200)

    assert len(response.pyquery('input[type="radio"][name="edit-profile-title"]')) == 2

    assert len(response.pyquery('input[type="radio"][name="edit-profile-title"][readonly="true"]')) == 0

    assert len(response.pyquery('select[name="edit-profile-title"]')) == 0

    simple_user.verified_attributes.title = 'Monsieur'

    response = app.get(url, status=200)

    assert len(response.pyquery('input[type="radio"][name="edit-profile-title"]')) == 0

    assert len(response.pyquery('input[type="text"][name="edit-profile-title@disabled"][readonly]')) == 1