Configurable restrictions for user list/detail view.

[rhyw]

An attempt to resolve #209

[rhyw]

I added several test cases, which makes sure once configured in settings, corresponding user list/detail view are no longer accessible. However I was unable to login using the test client in test_views.py. I tried with below forms:

self.client.login(username="foo", password="xxx")

and

self.client.post("/auth/login/", {"username": "foo", "password": "xxx"})

Neither worked. I failed to find a neat way to do this.

Also after looked into the test_views.py, I believe the cases in TestAuthView are not doing what it should be doing. The auth(login/logout) is not covered in tests. I'd appreciate if someone tells how I could authenticate using the test client, since the cases for logged in user access are needed as well.

PTAL.

[rohanpm]

I added several test cases, which makes sure once configured in settings, corresponding user list/detail view are no longer accessible. However I was unable to login using the test client in test_views.py. I tried with below forms:

self.client.login(username="foo", password="xxx")

I believe the above works if given a correct username and password, but no users seem to exist by default.

The following worked for me, to create a user before authenticating with it:

user = User.objects.create(username='testuser')
user.set_password('testpass')
user.save()

assert self.client.login(username="testuser", password="testpass")

[rhyw]

I added several test cases, which makes sure once configured in settings, corresponding user list/detail view are no longer accessible. However I was unable to login using the test client in test_views.py. I tried with below forms:

self.client.login(username="foo", password="xxx")

I believe the above works if given a correct username and password, but no users seem to exist by default.

The following worked for me, to create a user before authenticating with it:

user = User.objects.create(username='testuser')
user.set_password('testpass')
user.save()

assert self.client.login(username="testuser", password="testpass")

I guess my mistake was that I created the user and specified the password at the same time, something like this:

create(username=username, password=password)

which just won't work! I'll try use set_password explicitly, thanks!

[rohanpm]

Could you please arrange for one other person who also works on openscanhub to post a +1 on this so that I know you guys have agreed on the solution?

[rhyw]

@kdudka would you mind give a look when got time? Thanks.

[kdudka]

I confirm it works as expected. Thanks!