fix a load of test

rad/tests/test_user_access.py

@@ -0,0 +1,91 @@
+
+from django.urls import reverse
+
+from rich.pretty import pprint
+
+from bs4 import BeautifulSoup
+
+from django.contrib.auth.models import Group
+import pytest
+
+
+@pytest.fixture
+def create_users(db, django_user_model):
+    user1 = django_user_model.objects.create_user(
+        "user1", "user1@user.com", "password"
+    )
+    user2 = django_user_model.objects.create_user(
+        "user2", "user2@user.com", "password"
+    )
+    #g = Group.objects.create(name="cid_user_manager")
+    #g.save()
+    #user.groups.add(g)
+    return user1, user2
+
+@pytest.fixture
+def create_cid_manager(db, django_user_model):
+    user = django_user_model.objects.create_user(
+        "cid_user", "cid@user.com", "password1234"
+    )
+    g = Group.objects.create(name="cid_user_manager")
+    g.save()
+    user.groups.add(g)
+    return user
+
+def test_profile_access_and_management(db, client, create_users, create_cid_manager):
+
+    response = client.get(reverse(f"profile"))
+
+    # should redirect to login page
+    assert response.status_code == 302
+    assert "accounts/login/" in response.url
+    # Test login
+
+    client.login(username="user1", password="password")
+
+    response = client.get(reverse(f"profile"))
+
+    assert response.status_code == 200
+
+    soup = BeautifulSoup(response.content, "html.parser")
+
+    assert soup.find(id="username").text == "user1"
+    assert soup.find(id="email").text == "user1@user.com"
+
+    # Check the links to change password and update profile
+    password_url = soup.find(id="password-change")["href"]
+    print(password_url)
+    password_change_response = client.get(password_url)
+    assert password_change_response.status_code == 200
+
+    password_soup = BeautifulSoup(password_change_response.content, "html.parser")
+    assert "Old password" in password_soup.text
+    assert "New password" in password_soup.text
+
+    update_profile = soup.find(id="update-profile-link")["href"]
+
+    assert update_profile == reverse("account_profile_update", kwargs={"slug": "user1"})
+
+    # check we can't access another users profile 
+    response_fail = client.get(reverse("account_profile_update", kwargs={"slug": "user2"}))
+    assert response_fail.status_code == 404
+    print(response_fail.content)
+
+    # And that we can access our own
+    update_profile_response = client.get(reverse("account_profile_update", kwargs={"slug": "user1"}))
+    assert update_profile_response.status_code == 200
+
+    assert "peninsula_trainee" not in BeautifulSoup(update_profile_response.content, "html.parser").text
+
+    update_response = client.post(reverse("account_profile_update", kwargs={"slug": "user1"}), {
+        "registration_number": 1234567
+    })
+    assert update_response.status_code == 302
+    # we reirect back to profile page on form submission
+    assert update_response.url == reverse("profile")
+
+    # check that the form has updated
+    update_profile_response = client.get(reverse("account_profile_update", kwargs={"slug": "user1"}))
+    assert BeautifulSoup(update_profile_response.content, "html.parser").find(id="id_registration_number")["value"]
+
+