5150

pending completion

Build # 5150

Build Type

push

travis-ci

Committed by

tisto

Commit Message

<a href="https://github.com/plone/plone.restapi/commit/<a class=hub.com/plone/plone.restapi/commit/eb4436792ff7978380ccabfb1885d4a4d2d5d340">eb4436792<a href="https://github.com/plone/plone.restapi/commit/eb4436792ff7978380ccabfb1885d4a4d2d5d340">&quot;&gt;Revert &amp;quot;Merge pull request #985 from plone/eea-plone4-cpanels&quot;

This reverts commit </a><a class="double-link" href="https://github.com/plone/plone.restapi/commit/<a class="double-link" href="https://github.com/plone/plone.restapi/commit/563d2a1731348ec525bc46c59dcb901a5df70030">563d2a173</a>">563d2a173</a><a href="https://github.com/plone/plone.restapi/commit/eb4436792ff7978380ccabfb1885d4a4d2d5d340">.

Run Details

5553 of 5881 relevant lines covered (94.42%)

1.89 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

98.61

/src/plone/restapi/services/copymove/copymove.py

# -*- coding: utf-8 -*-
from Acquisition import aq_parent
from plone.restapi.deserializer import json_body
from plone.restapi.services import Service
from Products.CMFCore.utils import getToolByName
from zExceptions import BadRequest
from zope.component import getMultiAdapter
from zope.interface import alsoProvides
from zope.security import checkPermission

import plone
import six


class BaseCopyMove(Service):
    """Base service for copy/move operations."""

    def __init__(self, context, request):
        super(BaseCopyMove, self).__init__(context, request)
        self.portal = getMultiAdapter(
            (self.context, self.request), name="plone_portal_state"
        ).portal()
        self.portal_url = self.portal.absolute_url()
        self.catalog = getToolByName(self.context, "portal_catalog")

    def get_object(self, key):
        """Get an object by url, path or UID."""
        if key.startswith(self.portal_url):
            # Resolve by URL
            key = key[len(self.portal_url) + 1 :]
            if six.PY2:
                key = key.encode("utf8")
            return self.portal.restrictedTraverse(key, None)
        elif key.startswith("/"):
            if six.PY2:
                key = key.encode("utf8")
            # Resolve by path
            return self.portal.restrictedTraverse(key.lstrip("/"), None)
        else:
            # Resolve by UID
            brain = self.catalog(UID=key)
            if brain:
                return brain[0].getObject()

    def reply(self):
        # return 401/403 Forbidden if the user has no permission
        if not checkPermission("cmf.AddPortalContent", self.context):
            pm = getToolByName(self.context, "portal_membership")
            if bool(pm.isAnonymousUser()):
                self.request.response.setStatus(401)
            else:
                self.request.response.setStatus(403)
            return

        data = json_body(self.request)

        source = data.get("source", None)

        if not source:
            raise BadRequest("Property 'source' is required")

        # Disable CSRF protection
        if "IDisableCSRFProtection" in dir(plone.protect.interfaces):
            alsoProvides(self.request, plone.protect.interfaces.IDisableCSRFProtection)

        if not isinstance(source, list):
            source = [source]

        parents_ids = {}
        for item in source:
            obj = self.get_object(item)
            if obj is not None:
                if self.is_moving:
                    # To be able to safely move the object, the user requires
                    # permissions on the parent
                    if not checkPermission(
                        "zope2.DeleteObjects", obj
                    ) and not checkPermission("zope2.DeleteObjects", aq_parent(obj)):
                        self.request.response.setStatus(403)
                        return
                parent = aq_parent(obj)
                if parent in parents_ids:
                    parents_ids[parent].append(obj.getId())
                else:
                    parents_ids[parent] = [obj.getId()]

        results = []
        for parent, ids in parents_ids.items():
            result = self.context.manage_pasteObjects(
                cb_copy_data=self.clipboard(parent, ids)
            )
            for res in result:
                results.append(
                    {
                        "source": "{}/{}".format(parent.absolute_url(), res["id"]),
                        "target": "{}/{}".format(
                            self.context.absolute_url(), res["new_id"]
                        ),
                    }
                )
        return results

    def clipboard(self, parent, ids):
        """Get clipboard data"""
        raise NotImplementedError


class Copy(BaseCopyMove):
    """Copies existing content objects."""

    is_moving = False

    def clipboard(self, parent, ids):
        return parent.manage_copyObjects(ids=ids)


class Move(BaseCopyMove):
    """Moves existing content objects."""

    is_moving = True

    def clipboard(self, parent, ids):
        return parent.manage_cutObjects(ids=ids)

1	# -- coding: utf-8 --
2	from Acquisition import aq_parent	2✔
3	from plone.restapi.deserializer import json_body	2✔
4	from plone.restapi.services import Service	2✔
5	from Products.CMFCore.utils import getToolByName	2✔
6	from zExceptions import BadRequest	2✔
7	from zope.component import getMultiAdapter	2✔
8	from zope.interface import alsoProvides	2✔
9	from zope.security import checkPermission	2✔
10
11	import plone	2✔
12	import six	2✔
13
14
15	class BaseCopyMove(Service):	2✔
16	"""Base service for copy/move operations."""
17
18	def __init__(self, context, request):	2✔
19	super(BaseCopyMove, self).__init__(context, request)	2✔
20	self.portal = getMultiAdapter(	2✔
21	(self.context, self.request), name="plone_portal_state"
22	).portal()
23	self.portal_url = self.portal.absolute_url()	2✔
24	self.catalog = getToolByName(self.context, "portal_catalog")	2✔
25
26	def get_object(self, key):	2✔
27	"""Get an object by url, path or UID."""
28	if key.startswith(self.portal_url):	2✔
29	# Resolve by URL
30	key = key[len(self.portal_url) + 1 :]	2✔
31	if six.PY2:	2✔
32	key = key.encode("utf8")	2✔
33	return self.portal.restrictedTraverse(key, None)	2✔
34	elif key.startswith("/"):	2✔
35	if six.PY2:	2✔
36	key = key.encode("utf8")	2✔
37	# Resolve by path
38	return self.portal.restrictedTraverse(key.lstrip("/"), None)	2✔
39	else:
40	# Resolve by UID
41	brain = self.catalog(UID=key)	2✔
42	if brain:	2✔
43	return brain[0].getObject()	2✔
44
45	def reply(self):	2✔
46	# return 401/403 Forbidden if the user has no permission
47	if not checkPermission("cmf.AddPortalContent", self.context):	2✔
48	pm = getToolByName(self.context, "portal_membership")	2✔
49	if bool(pm.isAnonymousUser()):	2✔
50	self.request.response.setStatus(401)	2✔
51	else:
52	self.request.response.setStatus(403)	2✔
53	return	2✔
54
55	data = json_body(self.request)	2✔
56
57	source = data.get("source", None)	2✔
58
59	if not source:	2✔
60	raise BadRequest("Property 'source' is required")	2✔
61
62	# Disable CSRF protection
63	if "IDisableCSRFProtection" in dir(plone.protect.interfaces):	2✔
64	alsoProvides(self.request, plone.protect.interfaces.IDisableCSRFProtection)	2✔
65
66	if not isinstance(source, list):	2✔
67	source = [source]	2✔
68
69	parents_ids = {}	2✔
70	for item in source:	2✔
71	obj = self.get_object(item)	2✔
72	if obj is not None:	2✔
73	if self.is_moving:	2✔
74	# To be able to safely move the object, the user requires
75	# permissions on the parent
76	if not checkPermission(	2✔
77	"zope2.DeleteObjects", obj
78	) and not checkPermission("zope2.DeleteObjects", aq_parent(obj)):
79	self.request.response.setStatus(403)	2✔
80	return	2✔
81	parent = aq_parent(obj)	2✔
82	if parent in parents_ids:	2✔
83	parents_ids[parent].append(obj.getId())	2✔
84	else:
85	parents_ids[parent] = [obj.getId()]	2✔
86
87	results = []	2✔
88	for parent, ids in parents_ids.items():	2✔
89	result = self.context.manage_pasteObjects(	2✔
90	cb_copy_data=self.clipboard(parent, ids)
91	)
92	for res in result:	2✔
93	results.append(	2✔
94	{
95	"source": "{}/{}".format(parent.absolute_url(), res["id"]),
96	"target": "{}/{}".format(
97	self.context.absolute_url(), res["new_id"]
98	),
99	}
100	)
101	return results	2✔
102
103	def clipboard(self, parent, ids):	2✔
104	"""Get clipboard data"""
105	raise NotImplementedError	×
106
107
108	class Copy(BaseCopyMove):	2✔
109	"""Copies existing content objects."""
110
111	is_moving = False	2✔
112
113	def clipboard(self, parent, ids):	2✔
114	return parent.manage_copyObjects(ids=ids)	2✔
115
116
117	class Move(BaseCopyMove):	2✔
118	"""Moves existing content objects."""
119
120	is_moving = True	2✔
121
122	def clipboard(self, parent, ids):	2✔
123	return parent.manage_cutObjects(ids=ids)	2✔

plone / plone.restapi / 5150

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous