mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
8c0fbff8f7
The Logs page shows who added, changed or deleted a compute, from web or API, and every login, failed login, lockout and logout, with the client address and a Result column (Done, Failed, Unknown for older rows). A failed change is recorded with its reason and the error still reaches the user; a refused one is recorded too. - logs.audit.write saves each row in its own savepoint and never raises, so a log write cannot break or undo the action it records. The audit() context manager writes one row when the change ends. - Logs gains success and ip; user, host and instance are wider and date is indexed. The page orders by date then id. - A compute edit names the changed fields; an edit that changes nothing writes no row, and an empty password field is no change. - A compute's VMs leaving the panel get a system row each: owners kept on the Removed VMs page, moved to another compute, restored, left without owners, or the removed record expired. - Job rows carry the result. A job's log entry that cannot be computed is logged and skipped instead of rolling back the finish (test_service.py changes this on purpose). - Logins are recorded by signal receivers; CustomLoginView is removed and the plain LoginView is used. A wrong OTP code is a failed login, counted by django-axes toward the lockout. Panel records and host-side objects follow in the next layers.
164 lines
6.6 KiB
Python
164 lines
6.6 KiB
Python
from django.contrib.auth.models import Group, User
|
|
from django.core.exceptions import ObjectDoesNotExist
|
|
from django.shortcuts import reverse
|
|
from django.test import RequestFactory, TestCase
|
|
|
|
from accounts.models import UserAttributes
|
|
from logs.models import Logs
|
|
|
|
|
|
class AdminTestCase(TestCase):
|
|
def setUp(self):
|
|
self.client.login(request=RequestFactory().get("/"), username="admin", password="admin")
|
|
Logs.objects.all().delete() # the login's row
|
|
|
|
def test_group_list(self):
|
|
response = self.client.get(reverse("admin:group_list"))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
def test_groups(self):
|
|
response = self.client.get(reverse("admin:group_create"))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
response = self.client.post(
|
|
reverse("admin:group_create"), {"name": "Test Group"}
|
|
)
|
|
self.assertRedirects(response, reverse("admin:group_list"))
|
|
|
|
group = Group.objects.get(name="Test Group")
|
|
group_id = group.id
|
|
|
|
response = self.client.get(reverse("admin:group_update", args=[group_id]))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
response = self.client.post(
|
|
reverse("admin:group_update", args=[group_id]), {"name": "Updated Group Test"}
|
|
)
|
|
self.assertRedirects(response, reverse("admin:group_list"))
|
|
|
|
group = Group.objects.get(id=group_id)
|
|
self.assertEqual(group.name, "Updated Group Test")
|
|
|
|
response = self.client.get(reverse("admin:group_delete", args=[group_id]))
|
|
self.assertEqual(response.status_code, 200)
|
|
# the shared confirmation page names what it deletes
|
|
self.assertContains(response, "<title>Delete Updated Group Test</title>", html=True)
|
|
|
|
response = self.client.post(reverse("admin:group_delete", args=[group_id]))
|
|
self.assertRedirects(response, reverse("admin:group_list"))
|
|
|
|
with self.assertRaises(ObjectDoesNotExist):
|
|
Group.objects.get(id=group_id)
|
|
|
|
def test_user_list(self):
|
|
response = self.client.get(reverse("admin:user_list"))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
def test_users(self):
|
|
response = self.client.get(reverse("admin:user_create"))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
response = self.client.post(
|
|
reverse("admin:user_create"),
|
|
{
|
|
"username": "test",
|
|
"password": "test",
|
|
"max_instances": 1,
|
|
"max_cpus": 1,
|
|
"max_memory": 1024,
|
|
"max_disk_size": 4,
|
|
},
|
|
)
|
|
self.assertRedirects(response, reverse("admin:user_list"))
|
|
|
|
user = User.objects.get(username="test")
|
|
user_id = user.id
|
|
|
|
ua: UserAttributes = UserAttributes.objects.get(user_id=user_id)
|
|
self.assertEqual(ua.user_id, user_id)
|
|
self.assertEqual(ua.max_instances, 1)
|
|
self.assertEqual(ua.max_cpus, 1)
|
|
self.assertEqual(ua.max_memory, 1024)
|
|
self.assertEqual(ua.max_disk_size, 4)
|
|
|
|
response = self.client.get(reverse("admin:user_update", args=[user_id]))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
response = self.client.post(
|
|
reverse("admin:user_update", args=[user_id]),
|
|
{
|
|
"username": "utest",
|
|
"max_instances": 2,
|
|
"max_cpus": 2,
|
|
"max_memory": 2048,
|
|
"max_disk_size": 8,
|
|
},
|
|
)
|
|
self.assertRedirects(response, reverse("admin:user_list"))
|
|
|
|
user = User.objects.get(id=user_id)
|
|
self.assertEqual(user.username, "utest")
|
|
|
|
ua = UserAttributes.objects.get(user_id=user_id)
|
|
self.assertEqual(ua.user_id, user_id)
|
|
self.assertEqual(ua.max_instances, 2)
|
|
self.assertEqual(ua.max_cpus, 2)
|
|
self.assertEqual(ua.max_memory, 2048)
|
|
self.assertEqual(ua.max_disk_size, 8)
|
|
|
|
# Blocking changes state, so a GET (e.g. an <img> tag) must not do it.
|
|
User.objects.filter(id=user_id).update(is_active=True)
|
|
response = self.client.get(reverse("admin:user_block", args=[user_id]))
|
|
self.assertEqual(response.status_code, 405)
|
|
self.assertTrue(User.objects.get(id=user_id).is_active)
|
|
|
|
response = self.client.post(reverse("admin:user_block", args=[user_id]))
|
|
user = User.objects.get(id=user_id)
|
|
self.assertFalse(user.is_active)
|
|
|
|
response = self.client.get(reverse("admin:user_unblock", args=[user_id]))
|
|
self.assertEqual(response.status_code, 405)
|
|
self.assertFalse(User.objects.get(id=user_id).is_active)
|
|
|
|
response = self.client.post(reverse("admin:user_unblock", args=[user_id]))
|
|
user = User.objects.get(id=user_id)
|
|
self.assertTrue(user.is_active)
|
|
|
|
response = self.client.get(reverse("admin:user_delete", args=[user_id]))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
response = self.client.post(reverse("admin:user_delete", args=[user_id]))
|
|
self.assertRedirects(response, reverse("admin:user_list"))
|
|
|
|
with self.assertRaises(ObjectDoesNotExist):
|
|
User.objects.get(id=user_id)
|
|
|
|
def test_logs(self):
|
|
response = self.client.get(reverse("admin:logs"))
|
|
self.assertEqual(response.status_code, 200)
|
|
|
|
def test_logs_show_result_and_ip(self):
|
|
Logs.objects.create(message="first", success=True, ip="192.0.2.7")
|
|
Logs.objects.create(message="second", success=False)
|
|
Logs.objects.create(message="third")
|
|
response = self.client.get(reverse("admin:logs"))
|
|
self.assertContains(response, "Done")
|
|
self.assertContains(response, "Failed")
|
|
self.assertContains(response, "Unknown")
|
|
self.assertContains(response, "192.0.2.7")
|
|
|
|
def test_logs_order_ties_by_id(self):
|
|
first = Logs.objects.create(message="first")
|
|
second = Logs.objects.create(message="second")
|
|
Logs.objects.filter(id__in=[first.id, second.id]).update(date=first.date)
|
|
response = self.client.get(reverse("admin:logs"))
|
|
self.assertEqual([log.id for log in response.context["logs"]], [second.id, first.id])
|
|
|
|
def test_logs_bad_page_numbers(self):
|
|
Logs.objects.create(message="entry")
|
|
response = self.client.get(reverse("admin:logs"), {"page": "abc"})
|
|
self.assertEqual(response.status_code, 200)
|
|
self.assertEqual(response.context["logs"].number, 1)
|
|
response = self.client.get(reverse("admin:logs"), {"page": "999"})
|
|
self.assertEqual(response.status_code, 200)
|
|
self.assertEqual(response.context["logs"].number, response.context["logs"].paginator.num_pages)
|