# -*- coding: utf-8 -*-

"""

 (c) 2015-2017 - Copyright Red Hat Inc

 Authors:

   Pierre-Yves Chibon <pingou@pingoured.fr>

"""

__requires__ = ['SQLAlchemy >= 0.8']

import pkg_resources

import datetime

import json

import unittest

import shutil

import sys

import tempfile

import os

import pygit2

from mock import patch, MagicMock

sys.path.insert(0, os.path.join(os.path.dirname(

    os.path.abspath(__file__)), '..'))

import pagure.lib

import tests

from pagure.lib.repo import PagureRepo

class PagureFlaskRepotests(tests.Modeltests):

    """ Tests for flask app controller of pagure """

    def setUp(self):

        """ Set up the environnment, ran before every tests. """

        super(PagureFlaskRepotests, self).setUp()

        pagure.APP.config['TESTING'] = True

        pagure.SESSION = self.session

        pagure.ui.SESSION = self.session

        pagure.ui.app.SESSION = self.session

        pagure.ui.filters.SESSION = self.session

        pagure.ui.repo.SESSION = self.session

        pagure.APP.config['VIRUS_SCAN_ATTACHMENTS'] = False

        pagure.APP.config['GIT_FOLDER'] = self.path

        pagure.APP.config['REQUESTS_FOLDER'] = os.path.join(

            self.path, 'requests')

        pagure.APP.config['TICKETS_FOLDER'] = os.path.join(

            self.path, 'tickets')

        pagure.APP.config['DOCS_FOLDER'] = os.path.join(

            self.path, 'docs')

        pagure.APP.config['UPLOAD_FOLDER_URL'] = '/releases/'

        pagure.APP.config['UPLOAD_FOLDER_PATH'] = os.path.join(

            self.path, 'releases')

        self.app = pagure.APP.test_client()

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_add_user_when_user_mngt_off(self, ast):

        """ Test the add_user endpoint when user management is turned off

        in the pagure instance """

        pagure.APP.config['ENABLE_USER_MNGT'] = False

        ast.return_value = False

        # No Git repo

        output = self.app.get('/foo/adduser')

        self.assertEqual(output.status_code, 404)

        tests.create_projects(self.session)

        tests.create_projects_git(self.path)

        # User not logged in

        output = self.app.get('/test/adduser')

        self.assertEqual(output.status_code, 302)

        user = tests.FakeUser(username='pingou')

        with tests.user_set(pagure.APP, user):

            output = self.app.get('/test/adduser')

            self.assertEqual(output.status_code, 404)

            #just get the csrf token

            pagure.APP.config['ENABLE_USER_MNGT'] = True

            output = self.app.get('/test/adduser')

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            pagure.APP.config['ENABLE_USER_MNGT'] = False

            data = {

                'user': 'ralph',

            }

            output = self.app.post('/test/adduser', data=data)

            self.assertEqual(output.status_code, 404)

            data['csrf_token'] = csrf_token

            output = self.app.post('/test/adduser', data=data)

            self.assertEqual(output.status_code, 404)

            data['user'] = 'foo'

            tests.create_projects_git(self.path)

            output = self.app.post(

                '/test/adduser', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 404)

        pagure.APP.config['ENABLE_USER_MNGT'] = True

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_add_deploykey(self, ast):

        """ Test the add_deploykey endpoint. """

        ast.return_value = False

        # No git repo

        output = self.app.get('/foo/adddeploykey')

        self.assertEqual(output.status_code, 404)

        tests.create_projects(self.session)

        tests.create_projects_git(self.path)

        # User not logged in

        output = self.app.get('/test/adddeploykey')

        self.assertEqual(output.status_code, 302)

        user = tests.FakeUser()

        with tests.user_set(pagure.APP, user):

            output = self.app.get('/test/adddeploykey')

            self.assertEqual(output.status_code, 403)

            ast.return_value = True

            output = self.app.get('/test/adddeploykey')

            self.assertEqual(output.status_code, 302)

            # Redirect also happens for POST request

            output = self.app.post('/test/adddeploykey')

            self.assertEqual(output.status_code, 302)

        # Need to do this un-authentified since our fake user isn't in the DB

        # Check the message flashed during the redirect

        output = self.app.get('/')

        self.assertEqual(output.status_code, 200)

        self.assertIn(

            '</button>\n                      Action canceled, try it '

            'again',output.data)

        ast.return_value = False

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.get('/test/adddeploykey')

            self.assertEqual(output.status_code, 200)

            self.assertIn('Add deploy key to the', output.data)

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {

                'ssh_key': 'asdf',

                'pushaccess': 'false'

            }

            # No CSRF token

            output = self.app.post('/test/adddeploykey', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertTrue('Add deploy key to the' in output.data)

            data['csrf_token'] = csrf_token

            # First, invalid SSH key

            output = self.app.post('/test/adddeploykey', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn('Add deploy key to the', output.data)

            self.assertIn('Deploy key invalid', output.data)

            # Next up, multiple SSH keys

            data['ssh_key'] = 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDAzBMSIlvPRaEiLOTVInErkRIw9CzQQcnslDekAn1jFnGf+SNa1acvbTiATbCX71AA03giKrPxPH79dxcC7aDXerc6zRcKjJs6MAL9PrCjnbyxCKXRNNZU5U9X/DLaaL1b3caB+WD6OoorhS3LTEtKPX8xyjOzhf3OQSzNjhJp5Q==\nssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDAzBMSIlvPRaEiLOTVInErkRIw9CzQQcnslDekAn1jFnGf+SNa1acvbTiATbCX71AA03giKrPxPH79dxcC7aDXerc6zRcKjJs6MAL9PrCjnbyxCKXRNNZU5U9X/DLaaL1b3caB+WD6OoorhS3LTEtKPX8xyjOzhf3OQSzNjhJp5Q=='

            output = self.app.post(

                '/test/adddeploykey', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn('Deploy key can only be single keys.', output.data)

            # Now, a valid SSH key

            data['ssh_key'] = 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDAzBMSIlvPRaEiLOTVInErkRIw9CzQQcnslDekAn1jFnGf+SNa1acvbTiATbCX71AA03giKrPxPH79dxcC7aDXerc6zRcKjJs6MAL9PrCjnbyxCKXRNNZU5U9X/DLaaL1b3caB+WD6OoorhS3LTEtKPX8xyjOzhf3OQSzNjhJp5Q=='

            output = self.app.post(

                '/test/adddeploykey', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn('Deploy key added', output.data)

            self.assertNotIn('PUSH ACCESS', output.data)

            # And now, adding the same key

            output = self.app.post(

                '/test/adddeploykey', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn('Deploy key already exists', output.data)

            # And next, a key with push access

            data['ssh_key'] = 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC9Xwc2RDzPBhlEDARfHldGjudIVoa04tqT1JVKGQmyllTFz7Rb8CngQL3e7zyNzotnhwYKHdoiLlPkVEiDee4dWMUe48ilqId+FJZQGhyv8fu4BoFdE1AJUVylzmltbLg14VqG5gjTpXgtlrEva9arKwBMHJjRYc8ScaSn3OgyQw=='

            data['pushaccess'] = 'true'

            output = self.app.post(

                '/test/adddeploykey', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn('Deploy key added', output.data)

            self.assertIn('PUSH ACCESS', output.data)

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_add_user(self, ast):

        """ Test the add_user endpoint. """

        ast.return_value = False

        # No git repo

        output = self.app.get('/foo/adduser')

        self.assertEqual(output.status_code, 404)

        tests.create_projects(self.session)

        tests.create_projects_git(self.path)

        # User not logged in

        output = self.app.get('/test/adduser')

        self.assertEqual(output.status_code, 302)

        user = tests.FakeUser()

        with tests.user_set(pagure.APP, user):

            output = self.app.get('/test/adduser')

            self.assertEqual(output.status_code, 403)

            ast.return_value = True

            output = self.app.get('/test/adduser')

            self.assertEqual(output.status_code, 302)

            # Redirect also happens for POST request

            output = self.app.post('/test/adduser')

            self.assertEqual(output.status_code, 302)

        # Need to do this un-authentified since our fake user isn't in the DB

        # Check the message flashed during the redirect

        output = self.app.get('/')

        self.assertEqual(output.status_code, 200)

        self.assertIn(

            '</button>\n                      Action canceled, try it '

            'again',output.data)

        ast.return_value = False

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.get('/test/adduser')

            self.assertEqual(output.status_code, 200)

            self.assertIn('Add user to the', output.data)

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {

                'user': 'ralph',

            }

            # Missing access and no CSRF

            output = self.app.post('/test/adduser', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Add user - test - Pagure</title>', output.data)

            self.assertTrue('Add user to the' in output.data)

            # No CSRF

            output = self.app.post('/test/adduser', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Add user - test - Pagure</title>', output.data)

            # Missing access

            data['csrf_token'] = csrf_token

            output = self.app.post('/test/adduser', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Add user - test - Pagure</title>', output.data)

            self.assertIn('Add user to the', output.data)

            # Unknown user

            data['access'] = 'commit'

            output = self.app.post('/test/adduser', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Add user - test - Pagure</title>', output.data)

            self.assertIn('Add user to the', output.data)

            self.assertIn(

                '</button>\n                      No user "ralph" found\n',

                output.data)

            # All correct

            data['user'] = 'foo'

            output = self.app.post(

                '/test/adduser', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn(

                '</button>\n                      User added', output.data)

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_add_group_project_when_user_mngt_off(self, ast):

        """ Test the add_group_project endpoint  when user management is

        turned off in the pagure instance"""

        pagure.APP.config['ENABLE_USER_MNGT'] = False

        ast.return_value = False

        # No Git repo

        output = self.app.get('/foo/addgroup')

        self.assertEqual(output.status_code, 404)

        tests.create_projects(self.session)

        tests.create_projects_git(self.path)

        # User not logged in

        output = self.app.get('/test/addgroup')

        self.assertEqual(output.status_code, 302)

        msg = pagure.lib.add_group(

            self.session,

            group_name='foo',

            group_type='bar',

            display_name='foo group',

            description=None,

            user='pingou',

            is_admin=False,

            blacklist=pagure.APP.config['BLACKLISTED_GROUPS'],

        )

        self.session.commit()

        self.assertEqual(msg, 'User `pingou` added to the group `foo`.')

        user = tests.FakeUser(username='pingou')

        with tests.user_set(pagure.APP, user):

            #just get the csrf token

            pagure.APP.config['ENABLE_USER_MNGT'] = True

            output = self.app.get('/test/addgroup')

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            pagure.APP.config['ENABLE_USER_MNGT'] = False

            data = {

                'group': 'ralph',

            }

            output = self.app.post('/test/addgroup', data=data)

            self.assertEqual(output.status_code, 404)

            data['csrf_token'] = csrf_token

            output = self.app.post('/test/addgroup', data=data)

            self.assertEqual(output.status_code, 404)

            data['group'] = 'foo'

            output = self.app.post(

                '/test/addgroup', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 404)

        pagure.APP.config['ENABLE_USER_MNGT'] = True

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_add_group_project(self, ast):

        """ Test the add_group_project endpoint. """

        ast.return_value = False

        # No Git repo

        output = self.app.get('/foo/addgroup')

        self.assertEqual(output.status_code, 404)

        tests.create_projects(self.session)

        tests.create_projects_git(self.path)

        # User not logged in

        output = self.app.get('/test/addgroup')

        self.assertEqual(output.status_code, 302)

        user = tests.FakeUser()

        with tests.user_set(pagure.APP, user):

            output = self.app.get('/test/addgroup')

            self.assertEqual(output.status_code, 403)

            ast.return_value = True

            output = self.app.get('/test/addgroup')

            self.assertEqual(output.status_code, 302)

            # Redirect also happens for POST request

            output = self.app.post('/test/addgroup')

            self.assertEqual(output.status_code, 302)

        # Need to do this un-authentified since our fake user isn't in the DB

        # Check the message flashed during the redirect

        output = self.app.get('/')

        self.assertEqual(output.status_code, 200)

        self.assertIn(

            '</button>\n                      Action canceled, try it '

            'again', output.data)

        ast.return_value = False

        msg = pagure.lib.add_group(

            self.session,

            group_name='foo',

            display_name='foo group',

            description=None,

            group_type='bar',

            user='pingou',

            is_admin=False,

            blacklist=pagure.APP.config['BLACKLISTED_GROUPS'],

        )

        self.session.commit()

        self.assertEqual(msg, 'User `pingou` added to the group `foo`.')

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.get('/test/addgroup')

            self.assertEqual(output.status_code, 200)

            self.assertTrue('Add group to the' in output.data)

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {

                'group': 'ralph',

            }

            # Missing CSRF

            output = self.app.post('/test/addgroup', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Add group - test - Pagure</title>', output.data)

            self.assertIn('Add group to the', output.data)

            # Missing access

            data['csrf_token'] = csrf_token

            output = self.app.post('/test/addgroup', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Add group - test - Pagure</title>', output.data)

            self.assertIn('Add group to the', output.data)

            # Unknown group

            data['access'] = 'ticket'

            output = self.app.post('/test/addgroup', data=data)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Add group - test - Pagure</title>', output.data)

            self.assertIn('Add group to the', output.data)

            self.assertIn(

                '</button>\n                      No group ralph found.',

                output.data)

            # All good

            data['group'] = 'foo'

            output = self.app.post(

                '/test/addgroup', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn(

                '</button>\n                      Group added', output.data)

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_remove_user_when_user_mngt_off(self, ast):

        """ Test the remove_user endpoint when user management is turned

        off in the pagure instance"""

        pagure.APP.config['ENABLE_USER_MNGT'] = False

        ast.return_value = False

        # Git repo not found

        output = self.app.post('/foo/dropuser/1')

        self.assertEqual(output.status_code, 404)

        user = tests.FakeUser(username='pingou')

        with tests.user_set(pagure.APP, user):

            tests.create_projects(self.session)

            tests.create_projects_git(self.path)

            output = self.app.post('/test/settings')

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropuser/2', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 404)

        # User not logged in

        output = self.app.post('/test/dropuser/1')

        self.assertEqual(output.status_code, 302)

        # Add an user to a project

        repo = pagure.lib.get_project(self.session, 'test')

        msg = pagure.lib.add_user_to_project(

            session=self.session,

            project=repo,

            new_user='foo',

            user='pingou',

        )

        self.session.commit()

        self.assertEqual(msg, 'User added')

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/dropuser/2', follow_redirects=True)

            self.assertEqual(output.status_code, 404)

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropuser/2', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 404)

        pagure.APP.config['ENABLE_USER_MNGT'] = True

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_remove_deploykey(self, ast):

        """ Test the remove_deploykey endpoint. """

        ast.return_value = False

        # Git repo not found

        output = self.app.post('/foo/dropdeploykey/1')

        self.assertEqual(output.status_code, 404)

        user = tests.FakeUser()

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/foo/dropdeploykey/1')

            self.assertEqual(output.status_code, 404)

            tests.create_projects(self.session)

            tests.create_projects_git(self.path)

            output = self.app.post('/test/dropdeploykey/1')

            self.assertEqual(output.status_code, 403)

            ast.return_value = True

            output = self.app.post('/test/dropdeploykey/1')

            self.assertEqual(output.status_code, 302)

            ast.return_value = False

        # User not logged in

        output = self.app.post('/test/dropdeploykey/1')

        self.assertEqual(output.status_code, 302)

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/settings')

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropdeploykey/1', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn('Deploy key does not exist in project', output.data)

        # Add a deploy key to a project

        repo = pagure.lib.get_project(self.session, 'test')

        msg = pagure.lib.add_deploykey_to_project(

            session=self.session,

            project=repo,

            ssh_key='ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDAzBMSIlvPRaEiLOTVInErkRIw9CzQQcnslDekAn1jFnGf+SNa1acvbTiATbCX71AA03giKrPxPH79dxcC7aDXerc6zRcKjJs6MAL9PrCjnbyxCKXRNNZU5U9X/DLaaL1b3caB+WD6OoorhS3LTEtKPX8xyjOzhf3OQSzNjhJp5Q==',

            pushaccess=True,

            user='pingou',

        )

        self.session.commit()

        self.assertEqual(msg, 'Deploy key added')

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/dropdeploykey/1', follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertNotIn('Deploy key removed', output.data)

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropdeploykey/1', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn('Deploy key removed', output.data)

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_remove_user(self, ast):

        """ Test the remove_user endpoint. """

        ast.return_value = False

        # Git repo not found

        output = self.app.post('/foo/dropuser/1')

        self.assertEqual(output.status_code, 404)

        user = tests.FakeUser()

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/foo/dropuser/1')

            self.assertEqual(output.status_code, 404)

            tests.create_projects(self.session)

            tests.create_projects_git(self.path)

            output = self.app.post('/test/dropuser/1')

            self.assertEqual(output.status_code, 403)

            ast.return_value = True

            output = self.app.post('/test/dropuser/1')

            self.assertEqual(output.status_code, 302)

            ast.return_value = False

        # User not logged in

        output = self.app.post('/test/dropuser/1')

        self.assertEqual(output.status_code, 302)

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/settings')

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropuser/2', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn(

                '</button>\n                      User does not have any '

                'access on the repo', output.data)

        # Add an user to a project

        repo = pagure.lib.get_project(self.session, 'test')

        msg = pagure.lib.add_user_to_project(

            session=self.session,

            project=repo,

            new_user='foo',

            user='pingou',

        )

        self.session.commit()

        self.assertEqual(msg, 'User added')

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/dropuser/2', follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertNotIn(

                '</button>\n                      User removed', output.data)

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropuser/2', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn(

                '</button>\n                      User removed', output.data)

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_remove_group_project_when_user_mngt_off(self, ast):

        """ Test the remove_group_project endpoint when user management is

        turned off in the pagure instance"""

        pagure.APP.config['ENABLE_USER_MNGT'] = False

        ast.return_value = False

        # No Git repo

        output = self.app.post('/foo/dropgroup/1')

        self.assertEqual(output.status_code, 404)

        tests.create_projects(self.session)

        tests.create_projects_git(self.path)

        # User not logged in

        output = self.app.post('/test/dropgroup/1')

        self.assertEqual(output.status_code, 302)

        user = tests.FakeUser()

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/settings')

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropgroup/2', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 404)

        # Create the new group

        msg = pagure.lib.add_group(

            session=self.session,

            group_name='testgrp',

            group_type='user',

            display_name='testgrp group',

            description=None,

            user='pingou',

            is_admin=False,

            blacklist=[],

        )

        self.assertEqual(msg, 'User `pingou` added to the group `testgrp`.')

        self.session.commit()

        repo = pagure.lib.get_project(self.session, 'test')

        # Add the group to a project

        msg = pagure.lib.add_group_to_project(

            session=self.session,

            project=repo,

            new_group='testgrp',

            user='pingou',

        )

        self.session.commit()

        self.assertEqual(msg, 'Group added')

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/dropgroup/1', follow_redirects=True)

            self.assertEqual(output.status_code, 404)

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropgroup/1', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 404)

        pagure.APP.config['ENABLE_USER_MNGT'] = True

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_remove_group_project(self, ast):

        """ Test the remove_group_project endpoint. """

        ast.return_value = False

        # No Git repo

        output = self.app.post('/foo/dropgroup/1')

        self.assertEqual(output.status_code, 404)

        user = tests.FakeUser()

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/foo/dropgroup/1')

            self.assertEqual(output.status_code, 404)

            tests.create_projects(self.session)

            tests.create_projects_git(self.path)

            output = self.app.post('/test/dropgroup/1')

            self.assertEqual(output.status_code, 403)

            ast.return_value = True

            output = self.app.post('/test/dropgroup/1')

            self.assertEqual(output.status_code, 302)

            ast.return_value = False

        # User not logged in

        output = self.app.post('/test/dropgroup/1')

        self.assertEqual(output.status_code, 302)

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/settings')

            csrf_token = output.data.split(

                'name="csrf_token" type="hidden" value="')[1].split('">')[0]

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropgroup/2', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn(

                '</button>\n                      '

                'Group does not seem to be part of this project',

                output.data)

        # Create the new group

        msg = pagure.lib.add_group(

            session=self.session,

            group_name='testgrp',

            group_type='user',

            display_name='testgrp group',

            description=None,

            user='pingou',

            is_admin=False,

            blacklist=[],

        )

        self.assertEqual(msg, 'User `pingou` added to the group `testgrp`.')

        self.session.commit()

        repo = pagure.lib.get_project(self.session, 'test')

        # Add the group to a project

        msg = pagure.lib.add_group_to_project(

            session=self.session,

            project=repo,

            new_group='testgrp',

            user='pingou',

        )

        self.session.commit()

        self.assertEqual(msg, 'Group added')

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/dropgroup/1', follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertNotIn(

                '</button>\n                      Group removed',

                output.data)

            data = {'csrf_token': csrf_token}

            output = self.app.post(

                '/test/dropgroup/1', data=data, follow_redirects=True)

            self.assertEqual(output.status_code, 200)

            self.assertIn(

                '<title>Settings - test - Pagure</title>', output.data)

            self.assertIn('
Settings for test
', output.data)

            self.assertIn(

                '</button>\n                      Group removed',

                output.data)

    @patch('pagure.ui.repo.admin_session_timedout')

    def test_update_project(self, ast):

        """ Test the update_project endpoint. """

        ast.return_value = True

        # Git repo not found

        output = self.app.post('/foo/update')

        self.assertEqual(output.status_code, 404)

        user = tests.FakeUser()

        with tests.user_set(pagure.APP, user):

            # Project does not exist

            output = self.app.post('/foo/update')

            self.assertEqual(output.status_code, 404)

            tests.create_projects(self.session)

            tests.create_projects_git(self.path)

            # Session timed-out

            output = self.app.post('/test/update')

            self.assertEqual(output.status_code, 302)

            ast.return_value = False

            # Not allowed

            output = self.app.post('/test/update')

            self.assertEqual(output.status_code, 403)

        # User not logged in

        output = self.app.post('/test/update')

        self.assertEqual(output.status_code, 302)

        user.username = 'pingou'

        with tests.user_set(pagure.APP, user):

            output = self.app.post('/test/update', follow_redirects=True)