# -*- coding: utf-8 -*-

"""

 (c) 2015 - Copyright Red Hat Inc

 Authors:

   Pierre-Yves Chibon <pingou@pingoured.fr></pingou@pingoured.fr>

"""

from __future__ import unicode_literals

__requires__ = ['SQLAlchemy >= 0.8']

import pkg_resources

import datetime

import unittest

import shutil

import sys

import os

import json

from mock import patch, MagicMock

sys.path.insert(0, os.path.join(os.path.dirname(

    os.path.abspath(__file__)), '..'))

import pagure

import pagure.lib

import tests

class PagureFlaskApiForktests(tests.Modeltests):

    """ Tests for the flask API of pagure for issue """

    maxDiff = None

    def setUp(self):

        """ Set up the environnment, ran before every tests. """

        super(PagureFlaskApiForktests, self).setUp()

        pagure.config.config['REQUESTS_FOLDER'] = None

    @patch('pagure.lib.notify.send_email', MagicMock(return_value=True))

    def test_api_pull_request_views_pr_disabled(self):

        """ Test the api_pull_request_views method of the flask api when PR

        are disabled. """

        tests.create_projects(self.session)

        tests.create_tokens(self.session)

        tests.create_tokens_acl(self.session)

        # Create a pull-request

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(

            self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='master',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        settings = repo.settings

        settings['pull_requests'] = False

        repo.settings = settings

        self.session.add(repo)

        self.session.commit()

        output = self.app.get('/api/0/test/pull-requests')

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

                u'error': u'Pull-Request have been deactivated for this project',

                u'error_code': u'EPULLREQUESTSDISABLED'

            }

        )

    @patch('pagure.lib.notify.send_email', MagicMock(return_value=True))

    def test_api_pull_request_views_pr_closed(self):

        """ Test the api_pull_request_views method of the flask api to list

        the closed PRs. """

        tests.create_projects(self.session)

        tests.create_tokens(self.session)

        tests.create_tokens_acl(self.session)

        # Create a pull-request

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(

            self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='master',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        output = self.app.get('/api/0/test/pull-requests?status=closed')

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

                u'args': {u'assignee': None, u'author': None, u'status': u'closed'},

                u'requests': [],

                u'total_requests': 0

            }

        )

        # Close the PR and try again

        pagure.lib.close_pull_request(

            self.session, request=req, user='pingou', requestfolder=None,

            merged=False)

        output = self.app.get('/api/0/test/pull-requests?status=closed')

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        self.assertEqual(

            sorted(data.keys()), ['args', 'requests', 'total_requests'])

        self.assertDictEqual(

            data['args'],

            {u'assignee': None, u'author': None, u'status': u'closed'}

        )

        self.assertEqual(data['total_requests'], 1)

    @patch('pagure.lib.notify.send_email', MagicMock(return_value=True))

    def test_api_pull_request_views_all_pr(self):

        """ Test the api_pull_request_views method of the flask api to list

        all PRs. """

        tests.create_projects(self.session)

        tests.create_tokens(self.session)

        tests.create_tokens_acl(self.session)

        # Create a pull-request

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(

            self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='master',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        output = self.app.get('/api/0/test/pull-requests?status=all')

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        self.assertEqual(

            sorted(data.keys()), ['args', 'requests', 'total_requests'])

        self.assertDictEqual(

            data['args'],

            {u'assignee': None, u'author': None, u'status': u'all'}

        )

        self.assertEqual(data['total_requests'], 1)

        # Close the PR and try again

        pagure.lib.close_pull_request(

            self.session, request=req, user='pingou', requestfolder=None,

            merged=False)

        output = self.app.get('/api/0/test/pull-requests?status=all')

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        self.assertEqual(

            sorted(data.keys()), ['args', 'requests', 'total_requests'])

        self.assertDictEqual(

            data['args'],

            {u'assignee': None, u'author': None, u'status': u'all'}

        )

        self.assertEqual(data['total_requests'], 1)

    @patch('pagure.lib.notify.send_email')

    def test_api_pull_request_views(self, send_email):

        """ Test the api_pull_request_views method of the flask api. """

        send_email.return_value = True

        tests.create_projects(self.session)

        tests.create_tokens(self.session)

        tests.create_tokens_acl(self.session)

        # Create a pull-request

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(

            self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='master',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        # Invalid repo

        output = self.app.get('/api/0/foo/pull-requests')

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

              "error": "Project not found",

              "error_code": "ENOPROJECT",

            }

        )

        # List pull-requests

        output = self.app.get('/api/0/test/pull-requests')

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        data['requests'][0]['date_created'] = '1431414800'

        data['requests'][0]['updated_on'] = '1431414800'

        data['requests'][0]['project']['date_created'] = '1431414800'

        data['requests'][0]['project']['date_modified'] = '1431414800'

        data['requests'][0]['repo_from']['date_created'] = '1431414800'

        data['requests'][0]['repo_from']['date_modified'] = '1431414800'

        data['requests'][0]['uid'] = '1431414800'

        data['requests'][0]['last_updated'] = '1431414800'

        expected_data = {

            "args": {

                "assignee": None,

                "author": None,

                "status": True

            },

            "requests": [{

                "assignee": None,

                "branch": "master",

                "branch_from": "master",

                "cached_merge_status": "unknown",

                "closed_at": None,

                "closed_by": None,

                "comments": [],

                "commit_start": None,

                "commit_stop": None,

                "date_created": "1431414800",

                "id": 1,

                "initial_comment": None,

                "last_updated": "1431414800",

                "project": {

                    "access_groups": {

                        "admin": [],

                        "commit": [],

                        "ticket": []

                    },

                    "access_users": {

                        "admin": [],

                        "commit": [],

                        "owner": ["pingou"],

                        "ticket": []

                    },

                    "close_status": [

                        "Invalid",

                        "Insufficient data",

                        "Fixed",

                        "Duplicate"

                    ],

                    "custom_keys": [],

                    "date_created": "1431414800",

                    "date_modified": "1431414800",

                    "description": "test project #1",

                    "fullname": "test",

                    "url_path": "test",

                    "id": 1,

                    "milestones": {},

                    "name": "test",

                    "namespace": None,

                    "parent": None,

                    "priorities": {},

                    "tags": [],

                    "user": {

                        "fullname": "PY C",

                        "name": "pingou"

                    }

                },

                "remote_git": None,

                "repo_from": {

                    "access_groups": {

                        "admin": [],

                        "commit": [],

                        "ticket": []},

                    "access_users": {

                        "admin": [],

                        "commit": [],

                        "owner": ["pingou"],

                        "ticket": []

                    },

                    "close_status": [

                        "Invalid",

                        "Insufficient data",

                        "Fixed",

                        "Duplicate"

                    ],

                    "custom_keys": [],

                    "date_created": "1431414800",

                    "date_modified": "1431414800",

                    "description": "test project #1",

                    "fullname": "test",

                    "url_path": "test",

                    "id": 1,

                    "milestones": {},

                    "name": "test",

                    "namespace": None,

                    "parent": None,

                    "priorities": {},

                    "tags": [],

                    "user": {

                        "fullname": "PY C",

                        "name": "pingou"

                    }

                },

                "status": "Open",

                "title": "test pull-request",

                "uid": "1431414800",

                "updated_on": "1431414800",

                "user": {

                    "fullname": "PY C",

                    "name": "pingou"

                }

            }],

            "total_requests": 1

        }

        self.assertDictEqual(data, expected_data)

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Access Pull-Request authenticated

        output = self.app.get('/api/0/test/pull-requests', headers=headers)

        self.assertEqual(output.status_code, 200)

        data2 = json.loads(output.get_data(as_text=True))

        data2['requests'][0]['date_created'] = '1431414800'

        data2['requests'][0]['updated_on'] = '1431414800'

        data2['requests'][0]['project']['date_created'] = '1431414800'

        data2['requests'][0]['project']['date_modified'] = '1431414800'

        data2['requests'][0]['repo_from']['date_created'] = '1431414800'

        data2['requests'][0]['repo_from']['date_modified'] = '1431414800'

        data2['requests'][0]['uid'] = '1431414800'

        data2['requests'][0]['last_updated'] = '1431414800'

        self.assertDictEqual(data, data2)

    @patch('pagure.lib.notify.send_email')

    def test_api_pull_request_view(self, send_email):

        """ Test the api_pull_request_view method of the flask api. """

        send_email.return_value = True

        tests.create_projects(self.session)

        tests.create_tokens(self.session)

        tests.create_tokens_acl(self.session)

        # Create a pull-request

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='master',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        # Invalid repo

        output = self.app.get('/api/0/foo/pull-request/1')

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

              "error": "Project not found",

              "error_code": "ENOPROJECT",

            }

        )

        # Invalid issue for this repo

        output = self.app.get('/api/0/test2/pull-request/1')

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

              "error": "Pull-Request not found",

              "error_code": "ENOREQ",

            }

        )

        # Valid issue

        output = self.app.get('/api/0/test/pull-request/1')

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        data['date_created'] = '1431414800'

        data['updated_on'] = '1431414800'

        data['project']['date_created'] = '1431414800'

        data['project']['date_modified'] = '1431414800'

        data['repo_from']['date_created'] = '1431414800'

        data['repo_from']['date_modified'] = '1431414800'

        data['uid'] = '1431414800'

        data['last_updated'] = '1431414800'

        expected_data = {

            "assignee": None,

            "branch": "master",

            "branch_from": "master",

            "cached_merge_status": "unknown",

            "closed_at": None,

            "closed_by": None,

            "comments": [],

            "commit_start": None,

            "commit_stop": None,

            "date_created": "1431414800",

            "id": 1,

            "initial_comment": None,

            "last_updated": "1431414800",

            "project": {

                "access_groups": {

                    "admin": [],

                    "commit": [],

                    "ticket": []

                },

                "access_users": {

                    "admin": [],

                    "commit": [],

                    "owner": ["pingou"],

                    "ticket": []

                },

                "close_status": [

                    "Invalid",

                    "Insufficient data",

                    "Fixed",

                    "Duplicate"

                ],

                "custom_keys": [],

                "date_created": "1431414800",

                "date_modified": "1431414800",

                "description": "test project #1",

                "fullname": "test",

                "url_path": "test",

                "id": 1,

                "milestones": {},

                "name": "test",

                "namespace": None,

                "parent": None,

                "priorities": {},

                "tags": [],

                "user": {

                    "fullname": "PY C",

                    "name": "pingou"

                }

            },

            "remote_git": None,

            "repo_from": {

                "access_groups": {

                    "admin": [],

                    "commit": [],

                    "ticket": []},

                "access_users": {

                    "admin": [],

                    "commit": [],

                    "owner": ["pingou"],

                    "ticket": []},

                "close_status": [

                    "Invalid",

                    "Insufficient data",

                    "Fixed",

                    "Duplicate"],

                    "custom_keys": [],

                    "date_created": "1431414800",

                    "date_modified": "1431414800",

                    "description": "test project #1",

                    "fullname": "test",

                    "url_path": "test",

                    "id": 1,

                    "milestones": {},

                    "name": "test",

                    "namespace": None,

                    "parent": None,

                    "priorities": {},

                    "tags": [],

                    "user": {

                        "fullname": "PY C",

                        "name": "pingou"

                    }

            },

            "status": "Open",

            "title": "test pull-request",

            "uid": "1431414800",

            "updated_on": "1431414800",

            "user": {

                "fullname": "PY C",

                "name": "pingou"

            }

        }

        self.assertDictEqual(data, expected_data)

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Access Pull-Request authenticated

        output = self.app.get('/api/0/test/pull-request/1', headers=headers)

        self.assertEqual(output.status_code, 200)

        data2 = json.loads(output.get_data(as_text=True))

        data2['date_created'] = '1431414800'

        data2['project']['date_created'] = '1431414800'

        data2['project']['date_modified'] = '1431414800'

        data2['repo_from']['date_created'] = '1431414800'

        data2['repo_from']['date_modified'] = '1431414800'

        data2['uid'] = '1431414800'

        data2['date_created'] = '1431414800'

        data2['updated_on'] = '1431414800'

        data2['last_updated'] = '1431414800'

        self.assertDictEqual(data, data2)

    @patch('pagure.lib.notify.send_email')

    def test_api_pull_request_close(self, send_email):

        """ Test the api_pull_request_close method of the flask api. """

        send_email.return_value = True

        tests.create_projects(self.session)

        tests.create_tokens(self.session)

        tests.create_tokens_acl(self.session)

        # Create the pull-request to close

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='master',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Invalid project

        output = self.app.post(

            '/api/0/foo/pull-request/1/close', headers=headers)

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

              "error": "Project not found",

              "error_code": "ENOPROJECT",

            }

        )

        # Valid token, wrong project

        output = self.app.post(

            '/api/0/test2/pull-request/1/close', headers=headers)

        self.assertEqual(output.status_code, 401)

        data = json.loads(output.get_data(as_text=True))

        self.assertEqual(pagure.api.APIERROR.EINVALIDTOK.name,

                         data['error_code'])

        self.assertEqual(pagure.api.APIERROR.EINVALIDTOK.value, data['error'])

        # Invalid PR

        output = self.app.post(

            '/api/0/test/pull-request/2/close', headers=headers)

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {'error': 'Pull-Request not found', 'error_code': "ENOREQ"}

        )

        # Create a token for foo for this project

        item = pagure.lib.model.Token(

            id='foobar_token',

            user_id=2,

            project_id=1,

            expiration=datetime.datetime.utcnow() + datetime.timedelta(

                days=30)

        )

        self.session.add(item)

        self.session.commit()

        # Allow the token to close PR

        acls = pagure.lib.get_acls(self.session)

        for acl in acls:

            if acl.name == 'pull_request_close':

                break

        item = pagure.lib.model.TokenAcl(

            token_id='foobar_token',

            acl_id=acl.id,

        )

        self.session.add(item)

        self.session.commit()

        headers = {'Authorization': 'token foobar_token'}

        # User not admin

        output = self.app.post(

            '/api/0/test/pull-request/1/close', headers=headers)

        self.assertEqual(output.status_code, 403)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

                'error': 'You are not allowed to merge/close pull-request '

                    'for this project',

                'error_code': "ENOPRCLOSE",

            }

        )

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Close PR

        output = self.app.post(

            '/api/0/test/pull-request/1/close', headers=headers)

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {"message": "Pull-request closed!"}

        )

    @patch('pagure.lib.notify.send_email')

    def test_api_pull_request_merge(self, send_email):

        """ Test the api_pull_request_merge method of the flask api. """

        send_email.return_value = True

        tests.create_projects(self.session)

        tests.create_projects_git(os.path.join(self.path, 'repos'), bare=True)

        tests.create_projects_git(os.path.join(self.path, 'requests'),

                                  bare=True)

        tests.add_readme_git_repo(os.path.join(self.path, 'repos', 'test.git'))

        tests.add_commit_git_repo(os.path.join(self.path, 'repos', 'test.git'),

                                  branch='test')

        tests.create_tokens(self.session)

        tests.create_tokens_acl(self.session)

        # Create the pull-request to close

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='test',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Invalid project

        output = self.app.post(

            '/api/0/foo/pull-request/1/merge', headers=headers)

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

              "error": "Project not found",

              "error_code": "ENOPROJECT",

            }

        )

        # Valid token, wrong project

        output = self.app.post(

            '/api/0/test2/pull-request/1/merge', headers=headers)

        self.assertEqual(output.status_code, 401)

        data = json.loads(output.get_data(as_text=True))

        self.assertEqual(pagure.api.APIERROR.EINVALIDTOK.name,

                         data['error_code'])

        self.assertEqual(pagure.api.APIERROR.EINVALIDTOK.value, data['error'])

        # Invalid PR

        output = self.app.post(

            '/api/0/test/pull-request/2/merge', headers=headers)

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {'error': 'Pull-Request not found', 'error_code': "ENOREQ"}

        )

        # Create a token for foo for this project

        item = pagure.lib.model.Token(

            id='foobar_token',

            user_id=2,

            project_id=1,

            expiration=datetime.datetime.utcnow() + datetime.timedelta(

                days=30)

        )

        self.session.add(item)

        self.session.commit()

        # Allow the token to merge PR

        acls = pagure.lib.get_acls(self.session)

        for acl in acls:

            if acl.name == 'pull_request_merge':

                break

        item = pagure.lib.model.TokenAcl(

            token_id='foobar_token',

            acl_id=acl.id,

        )

        self.session.add(item)

        self.session.commit()

        headers = {'Authorization': 'token foobar_token'}

        # User not admin

        output = self.app.post(

            '/api/0/test/pull-request/1/merge', headers=headers)

        self.assertEqual(output.status_code, 403)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

                'error': 'You are not allowed to merge/close pull-request '

                    'for this project',

                'error_code': "ENOPRCLOSE",

            }

        )

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Merge PR

        output = self.app.post(

            '/api/0/test/pull-request/1/merge', headers=headers)

        self.assertEqual(output.status_code, 200)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {"message": "Changes merged!"}

        )

    @patch('pagure.lib.notify.send_email')

    def test_api_pull_request_merge_user_token(self, send_email):

        """ Test the api_pull_request_merge method of the flask api. """

        send_email.return_value = True

        tests.create_projects(self.session)

        tests.create_projects_git(os.path.join(self.path, 'repos'), bare=True)

        tests.create_projects_git(os.path.join(self.path, 'requests'),

                                  bare=True)

        tests.add_readme_git_repo(os.path.join(self.path, 'repos', 'test.git'))

        tests.add_commit_git_repo(os.path.join(self.path, 'repos', 'test.git'),

                                  branch='test')

        tests.create_tokens(self.session, project_id=None)

        tests.create_tokens_acl(self.session)

        # Create the pull-request to close

        repo = pagure.lib.get_authorized_project(self.session, 'test')

        forked_repo = pagure.lib.get_authorized_project(self.session, 'test')

        req = pagure.lib.new_pull_request(

            session=self.session,

            repo_from=forked_repo,

            branch_from='test',

            repo_to=repo,

            branch_to='master',

            title='test pull-request',

            user='pingou',

            requestfolder=None,

        )

        self.session.commit()

        self.assertEqual(req.id, 1)

        self.assertEqual(req.title, 'test pull-request')

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Invalid project

        output = self.app.post(

            '/api/0/foo/pull-request/1/merge', headers=headers)

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

              "error": "Project not found",

              "error_code": "ENOPROJECT",

            }

        )

        # Valid token, invalid PR

        output = self.app.post(

            '/api/0/test2/pull-request/1/merge', headers=headers)

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {'error': 'Pull-Request not found', 'error_code': "ENOREQ"}

        )

        # Valid token, invalid PR - other project

        output = self.app.post(

            '/api/0/test/pull-request/2/merge', headers=headers)

        self.assertEqual(output.status_code, 404)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {'error': 'Pull-Request not found', 'error_code': "ENOREQ"}

        )

        # Create a token for foo for this project

        item = pagure.lib.model.Token(

            id='foobar_token',

            user_id=2,

            project_id=1,

            expiration=datetime.datetime.utcnow() + datetime.timedelta(

                days=30)

        )

        self.session.add(item)

        self.session.commit()

        # Allow the token to merge PR

        acls = pagure.lib.get_acls(self.session)

        acl = None

        for acl in acls:

            if acl.name == 'pull_request_merge':

                break

        item = pagure.lib.model.TokenAcl(

            token_id='foobar_token',

            acl_id=acl.id,

        )

        self.session.add(item)

        self.session.commit()

        headers = {'Authorization': 'token foobar_token'}

        # User not admin

        output = self.app.post(

            '/api/0/test/pull-request/1/merge', headers=headers)

        self.assertEqual(output.status_code, 403)

        data = json.loads(output.get_data(as_text=True))

        self.assertDictEqual(

            data,

            {

                'error': 'You are not allowed to merge/close pull-request '

                    'for this project',

                'error_code': "ENOPRCLOSE",

            }

        )

        headers = {'Authorization': 'token aaabbbcccddd'}

        # Merge PR