Changeset 9261

Timestamp:

30 Sep 2012, 20:30:43 (12 years ago)

Author:

Henrik Bettermann

Message:

Add exporter for accesscodes and accesscode batches. Only users with waeup.manageACBatches permission are allowed to use the accecodes exporter.

Location:

main/waeup.kofa/trunk/src/waeup/kofa

Files:

• accesscodes/export.py (added)
• accesscodes/tests/test_export.py (added)
• browser/pages.py (modified) (2 diffs)
• browser/tests/test_browser.py (modified) (2 diffs)

main/waeup.kofa/trunk/src/waeup/kofa/browser/pages.py

@@ -33 +33 @@
     )
 from zope.event import notify
+from zope.security import checkPermission
 from zope.securitypolicy.interfaces import IPrincipalRoleManager
 from zope.session.interfaces import ISession
@@ -1386 +1387 @@
         title_name_tuples = [
             (util.title, name) for name, util in utils]
+        # The exporter for access codes requires a special permission.
+        if not checkPermission('waeup.manageACBatches', self.context):
+            title_name_tuples.remove((u'AccessCodes', u'accesscodes'))
         return sorted(title_name_tuples)
 

main/waeup.kofa/trunk/src/waeup/kofa/browser/tests/test_browser.py

@@ -26 +26 @@
 from zope.component.hooks import setSite, clearSite
 from zope.security.interfaces import Unauthorized
+from zope.securitypolicy.interfaces import IPrincipalRoleManager
 from zope.testbrowser.testing import Browser
 from waeup.kofa.testing import FunctionalLayer, FunctionalTestCase
@@ -213 +214 @@
         return
 
+    def test_export_accesscodes(self):
+        # Create portal manager and CCOfficer
+        self.app['users'].addUser('mrmanager', 'mrmanagersecret')
+        self.app['users']['mrmanager'].email = 'mrmanager@foo.ng'
+        self.app['users']['mrmanager'].title = 'Carlo Pitter'
+        # Assign PortalManager role
+        prmlocal = IPrincipalRoleManager(self.app)
+        prmlocal.assignRoleToPrincipal('waeup.PortalManager', 'mrmanager')
+        self.app['users'].addUser('mrofficer', 'mrofficersecret')
+        self.app['users']['mrofficer'].email = 'mrofficer@foo.ng'
+        self.app['users']['mrofficer'].title = 'Carlos Potter'
+        # Assign CCOfficer role
+        prmlocal.assignRoleToPrincipal('waeup.CCOfficer', 'mrofficer')
+
+        # Login as portal manager
+        self.browser.open('http://localhost/app/login')
+        self.browser.getControl(name="form.login").value = 'mrmanager'
+        self.browser.getControl(name="form.password").value = 'mrmanagersecret'
+        self.browser.getControl("Login").click()
+
+        self.browser.open(self.datacenter_path + '/export')
+        self.assertTrue(
+            '<option value="accesscodebatches">' in self.browser.contents)
+        self.assertTrue('<option value="accesscodes">' in self.browser.contents)
+        self.browser.getControl(name="exporter").value = ['accesscodes']
+        self.browser.getControl("Create CSV file").click()
+        job_id = self.wait_for_export_job_completed()
+        try:
+            self.browser.getControl("Reload").click()
+        except LookupError:
+            pass
+        self.browser.getControl("Download").click()
+        self.assertEqual(self.browser.headers['content-type'],
+                         'text/csv; charset=UTF-8')
+        self.assertEqual(
+            'batch_num,batch_prefix,batch_serial,cost,history,owner,'
+            'random_num,representation,state\r\n',
+            self.browser.contents)
+
+        # Login as officer who is not allowed to download accesscodes
+        self.browser.open('http://localhost/app/login')
+        self.browser.getControl(name="form.login").value = 'mrofficer'
+        self.browser.getControl(name="form.password").value = 'mrofficersecret'
+        self.browser.getControl("Login").click()
+
+        self.browser.open(self.datacenter_path + '/export')
+        # The CC Officer can see the accesscodebatches exporter ...
+        self.assertTrue(
+            '<option value="accesscodebatches">' in self.browser.contents)
+        # ... but not the accesscodes exporter.
+        self.assertFalse('<option value="accesscodes">' in self.browser.contents)
+
     def test_export_discard(self):
         # we can discard a generated export result