Benjamin Frantzen (bfr)
e4a4ffb974
- Rename the 'Use Rating on Project' feature into 'Customer Ratings' - Rename the 'Set Email Template to Stages' link to 'Set a Rating Email Template on Stages' - Add an optional list view for the Stages menu - display warning if the rating_template_id field is set and if one of the selected project_ids doesn't have the rating_status field set to true - Project form view revamp - rename the '% on tasks' stat button into 'Customer Satisfaction' - Remove the 'no option' for the rating frequency field because it is required - project form : Add a 'Go to Website' stat button - Project dashboard: remove the 'Customer Ratings' menu item in more - Ratings page: the 'Last 30 days' filter include ratings from today - remove the Appointment / Helpdesk Customer Satisfaction / Live Support menu items TASK ID : 1251
80 lines
3.1 KiB
Python
80 lines
3.1 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo.exceptions import AccessError
|
|
from odoo.tests import tagged, common, new_test_user
|
|
from odoo.tools import mute_logger
|
|
|
|
from functools import partial
|
|
|
|
rating_new_test_user = partial(new_test_user, context={'mail_create_nolog': True, 'mail_create_nosubscribe': True, 'mail_notrack': True, 'no_reset_password': True})
|
|
|
|
|
|
@tagged('security')
|
|
class TestAccessRating(common.SavepointCase):
|
|
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
super(TestAccessRating, cls).setUpClass()
|
|
|
|
cls.user_manager_partner = rating_new_test_user(
|
|
cls.env, name='Jean Admin', login='user_mana', email='admin@example.com',
|
|
groups='base.group_partner_manager,base.group_system'
|
|
)
|
|
|
|
cls.user_emp = rating_new_test_user(
|
|
cls.env, name='Eglantine Employee', login='user_emp', email='employee@example.com',
|
|
groups='base.group_user'
|
|
)
|
|
|
|
cls.user_portal = rating_new_test_user(
|
|
cls.env, name='Patrick Portal', login='user_portal', email='portal@example.com',
|
|
groups='base.group_portal'
|
|
)
|
|
|
|
cls.user_public = rating_new_test_user(
|
|
cls.env, name='Pauline Public', login='user_public', email='public@example.com',
|
|
groups='base.group_public'
|
|
)
|
|
|
|
cls.partner_to_rate = cls.env['res.partner'].with_user(cls.user_manager_partner).create({
|
|
"name": "Partner to Rate :("
|
|
})
|
|
|
|
|
|
@mute_logger('odoo.addons.base.models.ir_model')
|
|
def test_rating_access(self):
|
|
""" Security test : only a employee (user group) can create and write rating object """
|
|
# Public and portal user can't Access direclty to the ratings
|
|
with self.assertRaises(AccessError):
|
|
self.env['rating.rating'].with_user(self.user_portal).create({
|
|
'res_model_id': self.env['ir.model'].sudo().search([('model', '=', 'res.partner')], limit=1).id,
|
|
'res_model': 'res.partner',
|
|
'res_id': self.partner_to_rate.id,
|
|
'rating': 1
|
|
})
|
|
with self.assertRaises(AccessError):
|
|
self.env['rating.rating'].with_user(self.user_public).create({
|
|
'res_model_id': self.env['ir.model'].sudo().search([('model', '=', 'res.partner')], limit=1).id,
|
|
'res_model': 'res.partner',
|
|
'res_id': self.partner_to_rate.id,
|
|
'rating': 3
|
|
})
|
|
|
|
# No error with employee
|
|
ratting = self.env['rating.rating'].with_user(self.user_emp).create({
|
|
'res_model_id': self.env['ir.model'].sudo().search([('model', '=', 'res.partner')], limit=1).id,
|
|
'res_model': 'res.partner',
|
|
'res_id': self.partner_to_rate.id,
|
|
'rating': 3
|
|
})
|
|
|
|
with self.assertRaises(AccessError):
|
|
ratting.with_user(self.user_portal).write({
|
|
'feedback': 'You should not pass!'
|
|
})
|
|
with self.assertRaises(AccessError):
|
|
ratting.with_user(self.user_public).write({
|
|
'feedback': 'You should not pass!'
|
|
})
|