# -*- coding: utf-8 -*-
"""
(c) 2015-2018 - Copyright Red Hat Inc
Authors:
Pierre-Yves Chibon <pingou@pingoured.fr>
Patrick Uiterwijk <patrick@puiterwijk.org>
"""
from __future__ import unicode_literals
__requires__ = ['SQLAlchemy >= 0.8']
import pkg_resources
import datetime
import os
import shutil
import sys
import tempfile
import time
import unittest
import pygit2
import six
from mock import patch, MagicMock
sys.path.insert(0, os.path.join(os.path.dirname(
os.path.abspath(__file__)), '..'))
import pagure.lib.git
import pagure.lib.query
import tests
from pagure.lib.repo import PagureRepo
class PagureLibGitAuthtests(tests.Modeltests):
""" Tests for pagure.lib.git_auth """
config_values = {'authbackend': 'test_auth'}
def setUp(self):
super(PagureLibGitAuthtests, self).setUp()
tests.create_projects(self.session)
tests.create_tokens(self.session)
tests.create_tokens_acl(self.session)
self.create_project_full('hooktest')
def test_edit_with_all_allowed(self):
"""Tests that editing a file is possible if ACLs say allowed."""
user = tests.FakeUser()
user.username = 'pingou'
with tests.user_set(self.app.application, user):
# Add some content to the git repo
tests.add_content_git_repo(
os.path.join(self.path, 'repos', 'hooktest.git'))
data = {
'content': 'foo\n bar\n baz',
'commit_title': 'test commit',
'commit_message': 'Online commits from the gure.lib.get',
'email': 'bar@pingou.com',
'branch': 'master',
'csrf_token': self.get_csrf(),
}
output = self.app.post(
'/hooktest/edit/master/f/sources', data=data,
follow_redirects=True)
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertIn(
'<title>Commits - hooktest - Pagure</title>', output_text)
self.assertIn('test commit', output_text)
# Check file after the commit
output = self.app.get('/hooktest/raw/master/f/sources')
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertEqual(output_text, 'foo\n bar\n baz')
def test_edit_with_all_denied(self):
"""Tests that editing a file is not possible if ACLs say denied."""
self.set_auth_status(False)
user = tests.FakeUser()
user.username = 'pingou'
with tests.user_set(self.app.application, user):
# Add some content to the git repo
tests.add_content_git_repo(
os.path.join(self.path, 'repos', 'hooktest.git'))
data = {
'content': 'foo\n bar\n baz',
'commit_title': 'test commit',
'commit_message': 'Online commits from the gure.lib.get',
'email': 'bar@pingou.com',
'branch': 'master',
'csrf_token': self.get_csrf(),
}
output = self.app.post(
'/hooktest/edit/master/f/sources', data=data,
follow_redirects=True)
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertIn(
"Remote hook declined the push: Running hooks for hooktest\n"
"Denied push for ref 'refs/heads/master' for user 'pingou'\n"
"All changes have been rejected",
output_text
)
# Check file after the commit:
output = self.app.get('/hooktest/raw/master/f/sources')
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertEqual(output_text, 'foo\n bar')
def test_edit_pr(self):
"""Tests the ACLs if they only accept PRs."""
self.set_auth_status({'refs/heads/master': 'pronly',
'refs/heads/source': True})
user = tests.FakeUser()
user.username = 'pingou'
with tests.user_set(self.app.application, user):
# Add some content to the git repo
tests.add_content_git_repo(
os.path.join(self.path, 'repos', 'hooktest.git'))
# Try editing master branch, should fail (only PRs allowed)
data = {
'content': 'foo\n bar\n baz',
'commit_title': 'test commit',
'commit_message': 'Online commits from the gure.lib.get',
'email': 'bar@pingou.com',
'branch': 'master',
'csrf_token': self.get_csrf(),
}
output = self.app.post(
'/hooktest/edit/master/f/sources', data=data,
follow_redirects=True)
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertIn(
"Remote hook declined the push: Running hooks for hooktest\n"
"Denied push for ref 'refs/heads/master' for user 'pingou'\n"
"All changes have been rejected",
output_text
)
# Change something in the "source" branch
data = {
'content': 'foo\n bar\n baz',
'commit_title': 'test commit',
'commit_message': 'Online commits from the gure.lib.get',
'email': 'bar@pingou.com',
'branch': 'source',
'csrf_token': self.get_csrf(),
}
output = self.app.post(
'/hooktest/edit/master/f/sources', data=data,
follow_redirects=True)
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertIn(
'<title>Commits - hooktest - Pagure</title>', output_text)
self.assertIn('test commit', output_text)
# Check file after the commit:
output = self.app.get('/hooktest/raw/source/f/sources')
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertEqual(output_text, 'foo\n bar\n baz')
# Create the PRs
project = pagure.lib.query.get_authorized_project(self.session, 'hooktest')
req = pagure.lib.query.new_pull_request(
session=self.session,
repo_from=project,
branch_from="source",
repo_to=project,
branch_to='master',
title='PR to master',
user='pingou',
)
self.session.add(req)
self.session.commit()
# Check file before the merge
output = self.app.get('/hooktest/raw/master/f/sources')
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertEqual(output_text, 'foo\n bar')
# Try to merge (should work)
output = self.app.post(
'/hooktest/pull-request/1/merge', data=data, follow_redirects=True)
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertIn(
'<title>Overview - hooktest - Pagure</title>',
output_text
)
# Check file after the merge
output = self.app.get('/hooktest/raw/master/f/sources')
self.assertEqual(output.status_code, 200)
output_text = output.get_data(as_text=True)
self.assertEqual(output_text, 'foo\n bar\n baz')