Produits Entr'ouvert » w.c.s.

    assert len(resp.json['data']) == 2

    draft_formdata = [x for x in resp.json['data'] if x['status'] == 'Draft'][0]

    formdata = formdef.data_class()()

    formdata.data = {'0': 'foo@localhost', '1': 'xyy'}

    resp = get_app(pub).get(sign_url('/api/code/%s?orig=coucou' % code.id, '1234'), status=200)

    assert resp.json['err'] == 0

    assert resp.json['load_url'] == 'http://example.net/code/%s/load' % code.id

    formdef.enable_tracking_codes = False

        return resp.json['data']['id']

    resp = app.get('/backoffice/management/form-title/%s/' % post_formdata())

    resp = resp.follow()  # -> /backoffice/submission/form-title/?mt=XYZ

    # second page should be shown

    formdef.store()

    resp = app.get('/backoffice/management/form-title/%s/' % post_formdata())

    resp = resp.follow()  # -> /backoffice/submission/form-title/?mt=XYZ

    pq = resp.pyquery.remove_namespaces()

    resp = app.get('/backoffice/submission/')

    assert 'Submission to complete' in resp.text

    resp1 = resp1.follow()

    resp2 = resp2.follow()

    resp3 = resp3.follow()

    resp1.form['f1'] = 'foo'

    assert formdef.data_class().get(formdata.id).data['1'] == 'foo'

    # try again, very late.

    resp4 = resp4.follow()

    assert 'This form has already been submitted.' in resp4.text

    # check it can also be accessed using its final URL

    resp2 = app.get('/backoffice/management/%s/%s/' % (formdef.url_name, formdata_no))

            formdef.url_name, formdata_no)

    resp = resp.click('#%s' % formdata_no)

    assert resp.form['f1'].value == ''

    # restore a draft

    resp = resp.follow()

    # and check it got prefilled with the user from context

    assert resp.form['f1'].value == 'other@example.net'

    # restore another, without user id

    resp = resp.follow()

    # and check it was not prefilled

    assert resp.form['f1'].value == ''

    assert resp.form['f1'].value == ''

    # restore a draft

    resp = resp.follow()

    # and check it got prefilled with the user from context

    assert resp.form['f1'].value == 'other@example.net'

    # restore another, without user id

    resp = resp.follow()

    # and check it was not prefilled

    assert resp.form['f1'].value == ''

        assert resp.form['f5'].value == ''

        # restore a draft

        resp = resp.follow()

        resp = resp.form.submit('submit')

        # and check it got prefilled with the user from context

        assert resp.form['f5'].value == 'other@example.net'

        # restore another, without user id

        resp = resp.follow()

        resp = resp.form.submit('submit')

        # and check it was not prefilled

    formdata.page_no = 0

    formdata.user_id = other_user.id

    formdata.store()

    resp = resp.follow()

    resp.form['f1'] = 'Hello'

    resp_autosave = app.post('/backoffice/submission/form-title/autosave', params=resp.form.submit_fields())

    formdata.backoffice_submission = True

    formdata.store()

    resp = resp.follow()

    resp.form['f1'].value = 'PLOP'

    resp.form['f10'].value = 'bar'

    resp = app.get('/backoffice/submission/form-title/?NameID=%s&channel=mail' % local_user.name_identifiers[0])

    assert resp.location.startswith('http://example.net/backoffice/submission/form-title/')

    formdata = formdef.data_class().get(formdata_no)

    assert formdata.user_id == str(local_user.id)

    assert formdata.submission_channel == 'mail'

    assert '<a href="test/%s"' % draft.id in resp

    resp = app.get('/test/%s' % formdata.id)

    resp.status_int = 200

    resp = resp.follow(status=200)

    # disable formdef: formdatas are still visible and accessible, drafts are not

    assert '<a href="test/%s/"' % formdata.id in resp

    assert not 'Draft' in resp

    assert not '<a href="test/%s"' % draft.id in resp

    resp = resp.follow(status=403)

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert resp.location.startswith('http://example.net/test/?mt=')

    resp = resp.follow()

    # check anonymous user can't get to it from the URL

    pub.session_manager.session_class.wipe()

    assert resp.location.startswith('http://example.net/login')

    # or logged users that didn't enter the code:

    user = create_user(pub)

    login(get_app(pub), username='foo', password='foo').get(

    # check we can also get to it as a logged user

    pub.session_manager.session_class.wipe()

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code.lower()

    resp = resp.follow()

    resp = resp.follow()

    # go back as anonymous

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert resp.location.startswith('http://example.net/test/?mt=')

    resp = resp.follow()

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert 'form_comment' in resp.text # makes sure user is treated as submitter

    resp.forms[0]['comment'] = 'hello world'

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code.lower()

    resp = resp.follow()

    resp = resp.follow()

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert resp.location.startswith('http://example.net/test/?mt=')

    resp = resp.follow()

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert 'form_comment' in resp.text # makes sure user is treated as submitter

    resp.forms[0]['comment'] = 'hello world'

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert 'form_comment' in resp.text # makes sure user is treated as submitter

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert resp.location.startswith('http://example.net/test/?mt=')

    resp = resp.follow()

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % tracking_code

    resp = resp.follow()

    resp = resp.follow()

    assert resp.location.startswith('http://example.net/test/?mt=')

    resp = resp.follow()

    resp = resp.forms[0].submit()

    assert resp.location == 'http://example.net/code/%s/load' % code.id

    resp = resp.follow()

    resp = resp.follow()

    # check we get a not found error message on non-existent code

    formdata.status = 'draft'

    formdata.store()

    assert resp.location.startswith('http://example.net/login')

    formdata.user_id = user.id

    formdata.store()

    assert resp.location.startswith('http://example.net/login')

    assert resp.location.startswith('http://example.net/test/?mt=')

    formdata.user_id = 1000

    formdata.store()

def form_password_field_submit(app, password):

    code.store()

    resp = app.get('/code/%s/load' % code.id)

    resp = resp.follow() # -> /test/1/

    assert 'The form has been recorded' in resp.text

    # authorized access but not backoffice access

    app = login(get_app(pub), username='foo', password='foo')

    resp = app.get('/test/')

    assert 'You already started to fill this form.' in resp.text

    draft2 = formdef.data_class()()

    draft2.user_id = user.id

        d['last_update_time'] = misc.strftime('%Y-%m-%d %H:%M:%S', formdata.last_update_time)

    if formdata.is_draft():

        d['form_number_raw'] = d['form_number'] = None

        d['title'] = _('%(name)s (draft)') % {'name': formdata.formdef.name}

    else:

            raise TraversalError()

        data = {

            'err': 0,

            'load_url': get_publisher().get_frontoffice_url() + '/code/%s/load' % component,

        }

        return json.dumps(data)

            if self.filled.backoffice_submission:

                for role in get_request().user.get_roles():

                    if role in self.formdef.backoffice_submission_roles:

                            self.formdef.url_name, self.filled.id))

            raise errors.AccessForbiddenError()

from wcs.formdata import FormData

from wcs.formdef import FormDef

from wcs.categories import Category

from wcs.forms.root import FormPage as PublicFormFillPage

        return redirect('../..')

class FormFillPage(PublicFormFillPage):

    _q_exports = ['', 'tempfile', 'autosave', 'code',

            ('remove', 'remove_draft'), 'live']

                formdata.submission_context['return_url'] = return_url

            formdata.store()

            self.set_tracking_code(formdata)

        self.selected_submission_channel = get_request().form.get('submission_channel') or ''

        return super(FormFillPage, self)._q_index(*args, **kwargs)

    def html_top(self, *args, **kwargs):

        return html_top('submission', *args, **kwargs)

    def check_authentication_context(self):

        pass

                            formdata.submission_context['agent_id'], ignore_errors=True)

                    if agent_user:

                        label += ' (%s)' % agent_user.display_name

                        formdef.url_name, formdata.id, label)

                r += htmltext('</li>')

from quixote import get_publisher, get_request, get_response, get_session, redirect

from quixote.directory import Directory

from quixote.html import TemplateIO, htmltext

from wcs import data_sources

from wcs.api_utils import get_user_from_api_query_string, is_url_signed

        return r.getvalue()

    def _q_index(self):

        mine = self.check_auth()

        if not mine and not get_request().is_in_backoffice():

            # Access authorized but the form doesn't belong to the user; if the

                templates=list(self.get_formdef_template_variants(self.status_templates)),

                context=context)

    def get_workflow_form(self, user):

        submitted_fields = []

        form = self.filled.get_workflow_form(user, displayed_fields=submitted_fields)

        if BotFilter.is_bot():

            raise errors.AccessForbiddenError()

        get_session().mark_anonymous_formdata(formdata)

class TrackingCodesDirectory(Directory):

            if self.has_draft_support() and form.get_submit() == 'savedraft':

                filled = self.save_draft(form_data, page_no)

            for field in submitted_fields:

                if not field.is_visible(form_data, self.formdef) and 'f%s' % field.id in form._names:

            if self.has_draft_support() and form.get_submit() == 'savedraft':

                filled = self.save_draft(form_data, page_no = -1)

            # so it gets FakeFileWidget in preview mode

            form = self.create_view_form(form_data,

        get_response().set_content_type('image/png')

        return s.getvalue()

    def _q_lookup(self, component):

        try:

            filled = self.formdef.data_class().get(component)

        except KeyError:

            raise errors.TraversalError()

class RootDirectory(AccessControlled, Directory):

       {% endblocktrans %}

     </p>

     {% if drafts_length == 1 %}

     {% elif drafts_length > 1 %}

     <ul>

     {% for draft in drafts %}

                     {{draft.receipt_time}}</a>, {% blocktrans with page_no=draft.page_no|add:1 %}on page {{page_no}}{% endblocktrans %}</li>

     {% endfor %}

     </ul>

        workflow_data = {

            'resubmit_formdata_backoffice_url': new_formdata.get_url(backoffice=True),

        }

        formdata.update_workflow_data(workflow_data)

        formdata.store()