# -*- coding: utf-8 -*-
#
# Copyright © 2012 - 2020 Michal Čihař <michal@cihar.com>
#
# This file is part of Weblate <https://weblate.org/>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <https://www.gnu.org/licenses/>.
#

from django.test import TestCase
from django.test.utils import override_settings

from weblate.auth.models import Group, Permission, Role, User
from weblate.trans.models import Comment, Project


class PermissionsTest(TestCase):
    def setUp(self):
        self.user = User.objects.create_user('user', 'test@example.com', 'x')
        self.admin = User.objects.create_user('admin', 'admin@example.com', 'x')
        self.superuser = User.objects.create_user(
            'super', 'super@example.com', 'x', is_superuser=True
        )

        self.project = Project.objects.create(slug='test')
        self.project.add_user(self.admin, '@Administration')

    def test_admin_perm(self):
        self.assertTrue(self.superuser.has_perm('upload.authorship', self.project))
        self.assertTrue(self.admin.has_perm('upload.authorship', self.project))
        self.assertFalse(self.user.has_perm('upload.authorship', self.project))

    def test_user_perm(self):
        self.assertTrue(self.superuser.has_perm('comment.add', self.project))
        self.assertTrue(self.admin.has_perm('comment.add', self.project))
        self.assertTrue(self.user.has_perm('comment.add', self.project))

    def test_delete_comment(self):
        comment = Comment()
        self.assertTrue(
            self.superuser.has_perm('comment.delete', comment, self.project)
        )
        self.assertTrue(self.admin.has_perm('comment.delete', comment, self.project))
        self.assertFalse(self.user.has_perm('comment.delete', comment, self.project))

    def test_delete_owned_comment(self):
        comment = Comment(user=self.user)
        self.assertTrue(
            self.superuser.has_perm('comment.delete', comment, self.project)
        )
        self.assertTrue(self.admin.has_perm('comment.delete', comment, self.project))
        self.assertTrue(self.user.has_perm('comment.delete', comment, self.project))

    def test_delete_not_owned_comment(self):
        comment = Comment(user=self.admin)
        self.assertTrue(
            self.superuser.has_perm('comment.delete', comment, self.project)
        )
        self.assertTrue(self.admin.has_perm('comment.delete', comment, self.project))
        self.assertFalse(self.user.has_perm('comment.delete', comment, self.project))

    @override_settings(AUTH_RESTRICT_ADMINS={'super': ('trans.add_project',)})
    def test_restrict_super(self):
        self.assertFalse(self.superuser.has_perm('trans.change_project'))
        self.assertFalse(self.admin.has_perm('trans.change_project'))
        self.assertFalse(self.user.has_perm('trans.change_project'))
        self.assertTrue(self.superuser.has_perm('trans.add_project'))
        self.assertFalse(self.admin.has_perm('trans.add_project'))
        self.assertFalse(self.user.has_perm('trans.add_project'))
        # Should have no effect here
        self.test_delete_comment()

    @override_settings(AUTH_RESTRICT_ADMINS={'admin': ('trans.add_project',)})
    def test_restrict_admin(self):
        self.assertTrue(self.superuser.has_perm('trans.change_project'))
        self.assertFalse(self.admin.has_perm('trans.change_project'))
        self.assertFalse(self.user.has_perm('trans.change_project'))
        self.assertTrue(self.superuser.has_perm('trans.add_project'))
        self.assertFalse(self.admin.has_perm('trans.add_project'))
        self.assertFalse(self.user.has_perm('trans.add_project'))
        # Should have no effect here
        self.test_delete_comment()

    def test_global_perms(self):
        self.assertTrue(self.superuser.has_perm('management.use'))
        self.assertFalse(self.admin.has_perm('management.use'))
        self.assertFalse(self.user.has_perm('management.use'))

    def test_global_perms_granted(self):
        permission = Permission.objects.get(codename='management.use')

        role = Role.objects.create(name='Nearly superuser')
        role.permissions.add(permission)

        group = Group.objects.create(name='Nearly superuser')
        group.roles.add(role)

        self.user.groups.add(group)

        self.assertTrue(self.user.has_perm('management.use'))
