Nicolas Lempereur
56fe8ee9ee
In 46f2e1918 that replaced traceback when accessing an attachment with
access token with 403 or 404 errors, the added test would fail if run in
python2.
fix for https://github.com/odoo/odoo/commit/46f2e191#commitcomment-30796449
closes #27514
133 lines
4.8 KiB
Python
133 lines
4.8 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
from odoo.tests import common
|
|
import odoo
|
|
|
|
GIF = b"R0lGODdhAQABAIAAAP///////ywAAAAAAQABAAACAkQBADs="
|
|
|
|
|
|
class test_ir_http_mimetype(common.TransactionCase):
|
|
|
|
def test_ir_http_mimetype_attachment(self):
|
|
""" Test mimetype for attachment """
|
|
attachment = self.env['ir.attachment'].create({
|
|
'datas': GIF,
|
|
'name': 'Test mimetype gif',
|
|
'datas_fname': 'file.gif'})
|
|
|
|
status, headers, content = self.env['ir.http'].binary_content(
|
|
id=attachment.id,
|
|
mimetype=None,
|
|
default_mimetype='application/octet-stream',
|
|
env=self.env
|
|
)
|
|
mimetype = dict(headers).get('Content-Type')
|
|
self.assertEqual(mimetype, 'image/gif')
|
|
|
|
def test_ir_http_mimetype_attachment_name(self):
|
|
""" Test mimetype for attachment with bad name"""
|
|
attachment = self.env['ir.attachment'].create({
|
|
'datas': GIF,
|
|
'name': 'Test mimetype gif with png name',
|
|
'datas_fname': 'file.png'})
|
|
|
|
status, headers, content = self.env['ir.http'].binary_content(
|
|
id=attachment.id,
|
|
mimetype=None,
|
|
default_mimetype='application/octet-stream',
|
|
env=self.env
|
|
)
|
|
mimetype = dict(headers).get('Content-Type')
|
|
# TODO: fix and change it in master, should be image/gif
|
|
self.assertEqual(mimetype, 'image/png')
|
|
|
|
def test_ir_http_mimetype_basic_field(self):
|
|
""" Test mimetype for classic field """
|
|
partner = self.env['res.partner'].create({
|
|
'image': GIF,
|
|
'name': 'Test mimetype basic field',
|
|
})
|
|
|
|
status, headers, content = self.env['ir.http'].binary_content(
|
|
model='res.partner',
|
|
id=partner.id,
|
|
field='image',
|
|
default_mimetype='application/octet-stream',
|
|
env=self.env
|
|
)
|
|
mimetype = dict(headers).get('Content-Type')
|
|
self.assertEqual(mimetype, 'image/gif')
|
|
|
|
def test_ir_http_mimetype_computed_field(self):
|
|
""" Test mimetype for computed field wich resize picture"""
|
|
prop = self.env['ir.property'].create({
|
|
'fields_id': self.env['ir.model.fields'].search([], limit=1).id,
|
|
'name': "Property binary",
|
|
'value_binary': GIF,
|
|
'type': 'binary',
|
|
})
|
|
|
|
resized = odoo.tools.image_get_resized_images(prop.value_binary, return_big=True, avoid_resize_medium=True)['image_small']
|
|
# Simul computed field which resize and that is not attachement=True (E.G. on product)
|
|
prop.write({'value_binary': resized})
|
|
status, headers, content = self.env['ir.http'].binary_content(
|
|
model='ir.property',
|
|
id=prop.id,
|
|
field='value_binary',
|
|
default_mimetype='application/octet-stream',
|
|
env=self.env
|
|
)
|
|
mimetype = dict(headers).get('Content-Type')
|
|
self.assertEqual(mimetype, 'image/gif')
|
|
|
|
def test_ir_http_attachment_access(self):
|
|
""" Test attachment access with and without access token """
|
|
public_user = self.env.ref('base.public_user')
|
|
attachment = self.env['ir.attachment'].create({
|
|
'datas': GIF,
|
|
'name': 'Test valid access token with image',
|
|
'datas_fname': 'image.gif'
|
|
})
|
|
|
|
defaults = {
|
|
'id': attachment.id,
|
|
'default_mimetype': 'image/gif',
|
|
'env': public_user.sudo(public_user.id).env,
|
|
}
|
|
|
|
def test_access(**kwargs):
|
|
status, _, _ = self.env['ir.http'].binary_content(
|
|
**dict(defaults, **kwargs)
|
|
)
|
|
return status
|
|
|
|
status = test_access()
|
|
self.assertEqual(status, 403, "no access")
|
|
|
|
status = test_access(access_token=u'Secret')
|
|
self.assertEqual(status, 403,
|
|
"no access if access token for attachment without access token")
|
|
|
|
attachment.access_token = u'Secret'
|
|
status = test_access(access_token=u'Secret')
|
|
self.assertEqual(status, 200, "access for correct access token")
|
|
|
|
status = test_access(access_token=u'Wrong')
|
|
self.assertEqual(status, 403, "no access for wrong access token")
|
|
|
|
attachment.public = True
|
|
status = test_access()
|
|
self.assertEqual(status, 200, "access for attachment with access")
|
|
|
|
status = test_access(access_token=u'Wrong')
|
|
self.assertEqual(status, 403,
|
|
"no access for wrong access token for attachment with access")
|
|
|
|
attachment.unlink()
|
|
status = test_access()
|
|
self.assertEqual(status, 404, "no access for deleted attachment")
|
|
|
|
status = test_access(access_token=u'Secret')
|
|
self.assertEqual(status, 404,
|
|
"no access with access token for deleted attachment")
|