Changeset 12840

Timestamp:

1 Apr 2015, 08:35:16 (9 years ago)

Author:

Henrik Bettermann

Message:

Skip User Processor if user isn't allowed to manage users.

Location:

main/waeup.kofa/trunk/src/waeup/kofa/browser

Files:

• pages.py (modified) (1 diff)
• tests/test_browser.py (modified) (2 diffs)

main/waeup.kofa/trunk/src/waeup/kofa/browser/pages.py

@@ -1094 +1094 @@
         importer_props = []
         for x in importers:
+            # Skip User Processor if user isn't allowed to manage users.
+            if x.util_name == 'userprocessor' and not checkPermission(
+                'waeup.manageUsers', self.context):
+                continue
             iface_fields = schema.getFields(x.iface)
             available_fields = []

main/waeup.kofa/trunk/src/waeup/kofa/browser/tests/test_browser.py

@@ -403 +403 @@
         # We add a second certificate course which refers
         # to the same course but at a different level.
-        self.app['faculties']['fac1']['dep1'].certificates['CERT1'].addCertCourse(
+        self.app['faculties']['fac1']['dep1'].certificates[
+            'CERT1'].addCertCourse(
             self.course, level=210)
         # Both certificate courses will be automatically removed when
@@ -421 +422 @@
             'faculties']['fac1']['dep1'].certificates['CERT1'])
         return
+
+    def test_user_data_import_permission(self):
+        upload_path = 'http://localhost/app/datacenter/upload'
+        login_path = 'http://localhost/app/login'
+        # Create  officer
+        self.app['users'].addUser('officer', 'officersecret')
+        self.app['users']['officer'].email = 'mrofficer@foo.ng'
+        self.app['users']['officer'].title = 'Carlo Pitter'
+        # Assign role
+        prm = IPrincipalRoleManager(self.app)
+        prm.assignRoleToPrincipal('waeup.ImportManager', 'officer')
+        # Login
+        self.browser.open(login_path)
+        self.browser.getControl(name="form.login").value = 'officer'
+        self.browser.getControl(name="form.password").value = 'officersecret'
+        self.browser.getControl("Login").click()
+        self.browser.open(upload_path)
+        self.assertFalse('User Processor' in self.browser.contents)
+        # Assign role which is necessary to import user data
+        prm.assignRoleToPrincipal('waeup.UsersManager', 'officer')
+        self.browser.open(upload_path)
+        self.assertTrue('User Processor' in self.browser.contents)
+        return