Produits Entr'ouvert » Authentic 2

# authentic2 - versatile identity manager

# Copyright (C) 2010-2019 Entr'ouvert

#

# This program is free software: you can redistribute it and/or modify it

# under the terms of the GNU Affero General Public License as published

# by the Free Software Foundation, either version 3 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU Affero General Public License for more details.

#

# You should have received a copy of the GNU Affero General Public License

# along with this program.  If not, see <http://www.gnu.org/licenses/>.

from collections import OrderedDict

from django import forms

from django.utils.translation import ugettext as _

class LockedFieldFormMixin(object):

    def __init__(self, *args, **kwargs):

        super(LockedFieldFormMixin, self).__init__(*args, **kwargs)

        self.__lock_fields()

    def __lock_fields(self):

        # Locked fields are modified to use a read-only TextInput

        # widget remapped to a name which will be ignored by Form

        # implementation

        locked_fields = {}

        for name in self.fields:

            if not self.is_field_locked(name):

                continue

            field = self.fields[name]

            initial = self.initial[name]

            try:

                choices = field.choices

            except AttributeError:

                # BooleanField case

                if isinstance(initial, bool):

                    initial = _('Yes') if initial else _('No')

                else:

                    # Most other fields case

                    try:

                        initial = field.widget.format_value(initial)

                    except AttributeError:

                        # Django 1.8

                        try:

                            initial = field.widget._format_value(initial)

                        except AttributeError:

                            pass

            else:

                for key, label in choices:

                    if initial == key:

                        initial = label

                        break

            locked_fields[name] = forms.CharField(

                label=field.label,

                help_text=field.help_text,

                initial=initial,

                required=False,

                widget=forms.TextInput(attrs={'readonly': ''}))

        if not locked_fields:

            return

        new_fields = OrderedDict()

        for name in self.fields:

            if name in locked_fields:

                new_fields[name + '@disabled'] = locked_fields[name]

            else:

                new_fields[name] = self.fields[name]

        self.fields = new_fields

    def is_field_locked(self, name):

        raise NotImplementedError

from collections import OrderedDict

from .mixins import LockedFieldFormMixin

class BaseUserForm(LockedFieldFormMixin, forms.ModelForm):

        instance = kwargs.get('instance')

        # extended attributes are not model fields, their initial value must be

        # explicitely defined

        self.atvs = []

        self.locked_fields = set()

        if instance:

            self.atvs = models.AttributeValue.objects.select_related('attribute').with_owner(instance)

            for atv in self.atvs:

                name = atv.attribute.name

                if name in self.declared_fields:

                    initial[name] = atv.to_python()

                # helper data for LockedFieldFormMixin

                if atv.verified:

                    self.locked_fields.add(name)

    def is_field_locked(self, name):

        # helper method for LockedFieldFormMixin

        return name in self.locked_fields

    phone = Attribute.objects.create(

        kind='phone_number', user_visible=True, user_editable=True)

    title = Attribute.objects.create(

        name='title', label='title',

        kind='title', user_visible=True, user_editable=True)

    agreement = Attribute.objects.create(

        name='agreement', label='agreement',

        kind='boolean', user_visible=True, user_editable=True)

    resp = old_resp = app.get(url, status=200)

    resp.form['edit-profile-phone'] = '1234'

    resp.form['edit-profile-title'] = 'Mrs'

    resp.form['edit-profile-agreement'] = False

    resp = resp.form.submit()

    assert phone.get_value(simple_user) == '1234'

    assert title.get_value(simple_user) == 'Mrs'

    assert agreement.get_value(simple_user) is False

    assert phone.get_value(simple_user) == '0123456789'

    assert phone.get_value(simple_user) == '0123456789'

    phone.set_value(simple_user, '0123456789', verified=True)

    title.set_value(simple_user, 'Mr', verified=True)

    agreement.set_value(simple_user, True, verified=True)

    assert 'edit-profile-phone' not in resp.form.fields

    assert 'edit-profile-title' not in resp.form.fields

    assert 'edit-profile-agreement' not in resp.form.fields

    assert 'readonly' in resp.form['edit-profile-phone@disabled'].attrs

    assert resp.form['edit-profile-phone@disabled'].value == '0123456789'

    assert resp.form['edit-profile-title@disabled'].value == 'Mr'

    assert resp.form['edit-profile-agreement@disabled'].value == 'Yes'

    resp.form.set('edit-profile-phone@disabled', '1234')

    resp.form.set('edit-profile-title@disabled', 'Mrs')

    resp.form.set('edit-profile-agreement@disabled', 'False')

    assert phone.get_value(simple_user) == '0123456789'

    assert title.get_value(simple_user) == 'Mr'

    assert agreement.get_value(simple_user) is True

    resp = old_resp.form.submit()

    assert phone.get_value(simple_user) == '0123456789'

    assert title.get_value(simple_user) == 'Mr'

    assert agreement.get_value(simple_user) is True

    phone.disabled = True

    phone.save()

    assert 'edit-profile-phone@disabled' not in resp

    assert 'edit-profile-title@disabled' in resp

    assert 'edit-profile-agreement@disabled' in resp

    assert phone.get_value(simple_user) == '0123456789'

def test_account_edit_locked_title(app, simple_user):

    Attribute.objects.create(

        name='title', label='title',

        kind='title', user_visible=True, user_editable=True)

    simple_user.attributes.title = 'Monsieur'

    utils.login(app, simple_user)

    url = reverse('profile_edit')

    response = app.get(url, status=200)

    assert len(response.pyquery('input[type="radio"][name="edit-profile-title"]')) == 2

    assert len(response.pyquery('input[type="radio"][name="edit-profile-title"][readonly="true"]')) == 0

    assert len(response.pyquery('select[name="edit-profile-title"]')) == 0

    simple_user.verified_attributes.title = 'Monsieur'

    response = app.get(url, status=200)

    assert len(response.pyquery('input[type="radio"][name="edit-profile-title"]')) == 0

    assert len(response.pyquery('input[type="text"][name="edit-profile-title@disabled"][readonly]')) == 1