Merge remote-tracking branch 'origin/master' into open

PyRIGS/decorators.py

@@ -6,6 +6,34 @@ from django.urls import reverse
 from RIGS import models
 
 
+def get_oembed(login_url, request, oembed_view, kwargs):
+    context = {}
+    context['oembed_url'] = "{0}://{1}{2}".format(request.scheme, request.META['HTTP_HOST'], reverse(oembed_view, kwargs=kwargs))
+    context['login_url'] = "{0}?{1}={2}".format(login_url, REDIRECT_FIELD_NAME, request.get_full_path())
+    resp = render(request, 'login_redirect.html', context=context)
+    return resp
+
+
+def has_oembed(oembed_view, login_url=None):
+    if not login_url:
+        from django.conf import settings
+        login_url = settings.LOGIN_URL
+
+    def _dec(view_func):
+        def _checklogin(request, *args, **kwargs):
+            if request.user.is_authenticated:
+                return view_func(request, *args, **kwargs)
+            else:
+                if oembed_view is not None:
+                    return get_oembed(login_url, request, oembed_view, kwargs)
+                else:
+                    return HttpResponseRedirect('%s?%s=%s' % (login_url, REDIRECT_FIELD_NAME, request.get_full_path()))
+        _checklogin.__doc__ = view_func.__doc__
+        _checklogin.__dict__ = view_func.__dict__
+        return _checklogin
+    return _dec
+
+
 def user_passes_test_with_403(test_func, login_url=None, oembed_view=None):
     """
     Decorator for views that checks that the user passes the given test.
@@ -25,11 +53,7 @@ def user_passes_test_with_403(test_func, login_url=None, oembed_view=None):
                 return view_func(request, *args, **kwargs)
             elif not request.user.is_authenticated:
                 if oembed_view is not None:
-                    context = {}
-                    context['oembed_url'] = "{0}://{1}{2}".format(request.scheme, request.META['HTTP_HOST'], reverse(oembed_view, kwargs=kwargs))
-                    context['login_url'] = "{0}?{1}={2}".format(login_url, REDIRECT_FIELD_NAME, request.get_full_path())
-                    resp = render(request, 'login_redirect.html', context=context)
-                    return resp
+                    return get_oembed(login_url, request, oembed_view, kwargs)
                 else:
                     return HttpResponseRedirect('%s?%s=%s' % (login_url, REDIRECT_FIELD_NAME, request.get_full_path()))
             else:

README.md

@@ -1,20 +1,13 @@
 # TEC PA & Lighting - PyRIGS #
 [![Build Status](https://travis-ci.org/nottinghamtec/PyRIGS.svg?branch=develop)](https://travis-ci.org/nottinghamtec/PyRIGS)
-[![Coverage Status](https://coveralls.io/repos/github/nottinghamtec/PyRIGS/badge.svg?branch=develop)](https://coveralls.io/github/nottinghamtec/PyRIGS?branch=develop)
-[![Dependency Status](https://gemnasium.com/badges/github.com/nottinghamtec/PyRIGS.svg)](https://gemnasium.com/github.com/nottinghamtec/PyRIGS)
-
+[![Coverage Status](https://coveralls.io/repos/github/nottinghamtec/PyRIGS/badge.svg?branch=develop)](https://coveralls.io/github/nottinghamtec/PyRIGS)
 
 Welcome to TEC PA & Lightings PyRIGS program. This is a reimplementation of the existing Rig Information Gathering System (RIGS) that was developed using Ruby on Rails.
 
 The purpose of this project is to make the system more compatible and easier to understand such that should future changes be needed they can be made without having to understand the intricacies of Rails.
 
-At this stage the project is very early on, and the main focus has been on getting a working system that can be tested and put into use ASAP due to the imminent failure of the existing system. Because of this, the documentation is still quite weak, but this should be fixed as time goes on.
-
-This document is intended to get you up and running, but if don't care about what I have to say, just clone the sodding repository and have a poke around with what's in it, but for GODS SAKE DO NOT PUSH WITHOUT TESTING.
-
 ### What is this repository for? ###
-For the rapid development of the application for medium term deployment, the main branch is being used.
-Once the application is deployed in a production environment, other branches should be used to properly stage edits and pushes of new features. When a significant feature is developed on a branch, raise a pull request and it can be reviewed before being put into production.
+When a significant feature is developed on a branch, raise a pull request and it can be reviewed before being put into production.
 
 Most of the documents here assume a basic knowledge of how Python and Django work (hint, if I don't say something, Google it, you will find 10000's of answers). The documentation is purely to be specific to TEC's application of the framework.
 
@@ -26,7 +19,7 @@ For the more experienced developer/somebody who doesn't want a full IDE and want
 Please contact TJP for details on how to acquire these.
 
 ### Python Environment ###
-Whilst the Python version used is not critical to the running of the application, using the same version usually helps avoid a lot of issues. Mainly the C implementation of Python 2 (CPython 2) has been used (specifically the Python 2.7 standard). Most of the application has been written with Python 3 in mind however, and should run without issue. Some level of testing on Python 3 has been done, but there is no guarantee it will work (for more information on this please see [[Python Version]] on the wiki)
+Whilst the Python version used is not critical to the running of the application, using the same version usually helps avoid a lot of issues. Orginally written with the C implementation of Python 2 (CPython 2, specifically the Python 2.7 standard), the application now runs in Python 3.
 
 Once you have your Python distribution installed, go ahead an follow the steps to set up a virtualenv, which will isolate the project from the system environment.
 
@@ -115,5 +108,4 @@ python manage.py test RIGS.test_models.EventTestCase.test_current_events
 
 ```
 
-### Committing, pushing and testing ###
-Feel free to commit as you wish, on your own branch. On my branch (master for development) do not commit code that you either know doesn't work or don't know works. If you must commit this code, please make sure you say in the commit message that it isn't working, and if you can why it isn't working. If and only if you absolutely must push, then please don't leave it as the HEAD for too long, it's not much to ask but when you are done just make sure you haven't broken the HEAD for the next person.
+[![forthebadge](https://forthebadge.com/images/badges/built-with-resentment.svg)](https://forthebadge.com) [![forthebadge](https://forthebadge.com/images/badges/contains-technical-debt.svg)](https://forthebadge.com)

RIGS/forms.py

@@ -23,7 +23,7 @@ class ProfileRegistrationFormUniqueEmail(RegistrationFormUniqueEmail):
 
     class Meta:
         model = models.Profile
-        fields = ('username', 'email', 'first_name', 'last_name', 'initials', 'phone')
+        fields = ('username', 'email', 'first_name', 'last_name', 'initials')
 
     def clean_initials(self):
         """
@@ -138,6 +138,11 @@ class EventForm(forms.ModelForm):
 
         return item
 
+    def clean(self):
+        if self.cleaned_data.get("is_rig") and not (self.cleaned_data.get('person') or self.cleaned_data.get('organisation')):
+            raise forms.ValidationError('You haven\'t provided any client contact details. Please add a person or organisation.', code='contact')
+        return super(EventForm, self).clean()
+
     def save(self, commit=True):
         m = super(EventForm, self).save(commit=False)
 

RIGS/regbackend.py

@@ -8,7 +8,7 @@ def user_created(sender, user, request, **kwargs):
     user.first_name = form.data['first_name']
     user.last_name = form.data['last_name']
     user.initials = form.data['initials']
-    user.phone = form.data['phone']
+    # user.phone = form.data['phone']
     user.save()
 
 

RIGS/rigboard.py

@@ -140,15 +140,18 @@ class EventUpdate(generic.UpdateView):
             if value is not None and value != '':
                 context[field] = model.objects.get(pk=value)
 
-        # If this event has already been emailed to a client, show a warning
-        if self.object.auth_request_at is not None:
-            messages.info(self.request, 'This event has already been sent to the client for authorisation, any changes you make will be visible to them immediately.')
-
-        if hasattr(self.object, 'authorised'):
-            messages.warning(self.request, 'This event has already been authorised by client, any changes to price will require reauthorisation.')
-
         return context
 
+    def render_to_response(self, context, **response_kwargs):
+        if not hasattr(context, 'duplicate'):
+            # If this event has already been emailed to a client, show a warning
+            if self.object.auth_request_at is not None:
+                messages.info(self.request, 'This event has already been sent to the client for authorisation, any changes you make will be visible to them immediately.')
+
+            if hasattr(self.object, 'authorised'):
+                messages.warning(self.request, 'This event has already been authorised by client, any changes to price will require reauthorisation.')
+        return super(EventUpdate, self).render_to_response(context, **response_kwargs)
+
     def get_success_url(self):
         return reverse_lazy('event_detail', kwargs={'pk': self.object.pk})
 

RIGS/static/scss/screen.scss

@@ -65,6 +65,15 @@ textarea {
   overflow: hidden;
 }
 
+.dont-break-out {
+  overflow-wrap: break-word;
+  word-wrap: break-word;
+  -webkit-hyphens: auto;
+  -ms-hyphens: auto;
+  -moz-hyphens: auto;
+  hyphens: auto;
+}
+
 .modal-dialog {
   z-index: inherit; // bug fix introduced in 52682ce
 }

RIGS/templates/RIGS/event_detail.html

@@ -124,7 +124,7 @@
                     <dd>&nbsp;</dd>
 
                     <dt>Event Description</dt>
-                    <dd>{{ event.description|linebreaksbr }}</dd>
+                    <dd class="dont-break-out">{{ event.description|linebreaksbr }}</dd>
 
                     <dd>&nbsp;</dd>
 
@@ -160,7 +160,15 @@
     </div>
     {% if event.is_rig and event.internal and perms.RIGS.view_event %}
     <div class="col-sm-12">
-        <div class="panel panel-default">
+        <div class="panel panel-default
+            {% if object.authorised %}
+                panel-success
+            {% elif event.authorisation and event.authorisation.amount != event.total and event.authorisation.last_edited_at > event.auth_request_at %}
+                panel-warning
+            {% elif event.auth_request_to %}
+                panel-info
+            {% endif %}
+            ">
             <div class="panel-heading">Client Authorisation</div>
             <div class="panel-body">
                 <dl class="dl-horizontal col-sm-6">
@@ -190,7 +198,7 @@
                     </dd>
 
                     <dt>Authorised at</dt>
-                    <dd>{{ object.authorisation.last_edited_at }}</dd>
+                    <dd>{{ object.authorisation.last_edited_at|date:"D d M Y H:i" }}</dd>
 
                     <dt>Authorised amount</dt>
                     <dd>
@@ -219,7 +227,7 @@
                     {% if perms.RIGS.view_event %}
                     <div class="well well-sm">
                         <h4>Notes</h4>
-                        {{ event.notes|linebreaksbr }}
+                        <div class="dont-break-out">{{ event.notes|linebreaksbr }}</div>
                     </div>
                     {% endif %}
                     {% include 'RIGS/item_table.html' %}

RIGS/templates/RIGS/password_reset_disable.html

@@ -0,0 +1,9 @@
+{% extends 'base_rigs.html' %}
+
+{% block title %}Password Reset Disabled{% endblock %}
+
+{% block content %}
+<h1>Password reset is disabled</h1>
+<p> We are very sorry for the inconvenience, but due to a security vulnerability, password reset is currently disabled until the vulnerability can be patched.</p>
+<p> If you are locked out of your account, please contact an administrator and we can manually perform a reset</p>
+{% endblock %}

RIGS/templates/RIGS/version_changes.html

@@ -14,7 +14,7 @@
             {% for change in itemChange.field_changes %}
                   <li class="list-group-item">
                     <h4 class="list-group-item-heading">{{ change.field.verbose_name }}</h4>
-                    {% include "RIGS/version_changes_change.html" %}
+                    <div class="dont-break-out">{% include "RIGS/version_changes_change.html" %}</div>
                   </li>
             {% endfor %}
             </ul>

RIGS/templates/RIGS/version_changes_change.html

@@ -2,11 +2,11 @@
 {% if change.linebreaks and change.new and change.old %}
     {% for diff in change.diff %}
         {% if diff.type == "insert" %}
-            <ins>{{ diff.text|linebreaksbr }}</ins>
+            <ins class="dont-break-out">{{ diff.text|linebreaksbr }}</ins>
         {% elif diff.type == "delete" %}
-            <del>{{diff.text|linebreaksbr}}</del>
+            <del class="dont-break-out">{{diff.text|linebreaksbr}}</del>
         {% else %}
-            <span>{{diff.text|linebreaksbr}}</span>
+            <span class="dont-break-out">{{diff.text|linebreaksbr}}</span>
         {% endif %}
     {% endfor %}
     {% else %}

RIGS/test_functional.py

@@ -1,31 +1,25 @@
 # -*- coding: utf-8 -*-
 import os
 import re
-import pytz
 from datetime import date, time, datetime, timedelta
 
-
-from django.core import mail
+import pytz
+from django.conf import settings
+from django.core import mail, signing
 from django.db import transaction
 from django.http import HttpResponseBadRequest
 from django.test import LiveServerTestCase, TestCase
 from django.test.client import Client
+from django.urls import reverse
+from reversion import revisions as reversion
 from selenium import webdriver
-from selenium.common.exceptions import StaleElementReferenceException, WebDriverException
+from selenium.common.exceptions import StaleElementReferenceException
+from selenium.webdriver.support import expected_conditions
 from selenium.webdriver.common.keys import Keys
 from selenium.webdriver.support.ui import WebDriverWait
 
 from RIGS import models
 
-from reversion import revisions as reversion
-from django.urls import reverse
-from django.core import mail, signing
-
-
-from django.conf import settings
-
-import sys
-
 
 def create_browser():
     options = webdriver.ChromeOptions()
@@ -74,8 +68,9 @@ class UserRegistrationTest(LiveServerTestCase):
         self.assertEqual(last_name.get_attribute('placeholder'), 'Last name')
         initials = self.browser.find_element_by_id('id_initials')
         self.assertEqual(initials.get_attribute('placeholder'), 'Initials')
-        phone = self.browser.find_element_by_id('id_phone')
-        self.assertEqual(phone.get_attribute('placeholder'), 'Phone')
+        # No longer required for new users
+        # phone = self.browser.find_element_by_id('id_phone')
+        # self.assertEqual(phone.get_attribute('placeholder'), 'Phone')
 
         # Fill the form out incorrectly
         username.send_keys('TestUsername')
@@ -86,7 +81,7 @@ class UserRegistrationTest(LiveServerTestCase):
         first_name.send_keys('John')
         last_name.send_keys('Smith')
         initials.send_keys('JS')
-        phone.send_keys('0123456789')
+        # phone.send_keys('0123456789')
         self.browser.execute_script(
             "return function() {jQuery('#g-recaptcha-response').val('PASSED'); return 0}()")
 
@@ -187,7 +182,7 @@ class UserRegistrationTest(LiveServerTestCase):
         self.assertEqual(profileObject.first_name, 'John')
         self.assertEqual(profileObject.last_name, 'Smith')
         self.assertEqual(profileObject.initials, 'JS')
-        self.assertEqual(profileObject.phone, '0123456789')
+        # self.assertEqual(profileObject.phone, '0123456789')
         self.assertEqual(profileObject.email, 'test@example.com')
 
         # All is well
@@ -242,254 +237,236 @@ class EventTest(LiveServerTestCase):
         self.browser.get(self.live_server_url + '/rigboard/')
 
     def testRigCreate(self):
-        try:
-            # Requests address
-            self.browser.get(self.live_server_url + '/event/create/')
-            # Gets redirected to login and back
-            self.authenticate('/event/create/')
+        # Requests address
+        self.browser.get(self.live_server_url + '/event/create/')
+        # Gets redirected to login and back
+        self.authenticate('/event/create/')
 
-            wait = WebDriverWait(self.browser, 3)  # setup WebDriverWait to use later (to wait for animations)
+        wait = WebDriverWait(self.browser, 3)  # setup WebDriverWait to use later (to wait for animations)
 
-            wait.until(animation_is_finished())
+        wait.until(animation_is_finished())
 
-            # Check has slided up correctly - second save button hidden
-            save = self.browser.find_element_by_xpath(
-                '(//button[@type="submit"])[3]')
-            self.assertFalse(save.is_displayed())
+        # Check has slided up correctly - second save button hidden
+        save = self.browser.find_element_by_xpath(
+            '(//button[@type="submit"])[3]')
+        self.assertFalse(save.is_displayed())
 
-            # Click Rig button
-            self.browser.find_element_by_xpath('//button[.="Rig"]').click()
+        # Click Rig button
+        self.browser.find_element_by_xpath('//button[.="Rig"]').click()
 
-            # Slider expands and save button visible
-            self.assertTrue(save.is_displayed())
-            form = self.browser.find_element_by_tag_name('form')
+        # Slider expands and save button visible
+        self.assertTrue(save.is_displayed())
+        form = self.browser.find_element_by_tag_name('form')
 
-            # Create new person
-            wait.until(animation_is_finished())
-            add_person_button = self.browser.find_element_by_xpath(
-                '//a[@data-target="#id_person" and contains(@href, "add")]')
-            add_person_button.click()
+        # For now, just check that HTML5 Client validation is in place TODO Test needs rewriting to properly test all levels of validation.
+        self.assertTrue(self.browser.find_element_by_id('id_name').get_attribute('required') is not None)
 
-            # See modal has opened
-            modal = self.browser.find_element_by_id('modal')
-            wait.until(animation_is_finished())
-            self.assertTrue(modal.is_displayed())
-            self.assertIn("Add Person", modal.find_element_by_tag_name('h3').text)
+        # Set title
+        e = self.browser.find_element_by_id('id_name')
+        e.send_keys('Test Event Name')
 
-            # Fill person form out and submit
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Person 1")
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@type="submit"]').click()
-            wait.until(animation_is_finished())
-            self.assertFalse(modal.is_displayed())
+        # Create new person
+        wait.until(animation_is_finished())
+        add_person_button = self.browser.find_element_by_xpath(
+            '//a[@data-target="#id_person" and contains(@href, "add")]')
+        add_person_button.click()
 
-            # See new person selected
-            person1 = models.Person.objects.get(name="Test Person 1")
-            self.assertEqual(person1.name, form.find_element_by_xpath(
-                '//button[@data-id="id_person"]/span').text)
-            # and backend
-            option = form.find_element_by_xpath(
-                '//select[@id="id_person"]//option[@selected="selected"]')
-            self.assertEqual(person1.pk, int(option.get_attribute("value")))
+        # See modal has opened
+        modal = self.browser.find_element_by_id('modal')
+        wait.until(animation_is_finished())
+        self.assertTrue(modal.is_displayed())
+        self.assertIn("Add Person", modal.find_element_by_tag_name('h3').text)
 
-            # Change mind and add another
-            wait.until(animation_is_finished())
-            add_person_button.click()
+        # Fill person form out and submit
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Person 1")
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@type="submit"]').click()
+        wait.until(animation_is_finished())
+        self.assertFalse(modal.is_displayed())
 
-            wait.until(animation_is_finished())
-            self.assertTrue(modal.is_displayed())
-            self.assertIn("Add Person", modal.find_element_by_tag_name('h3').text)
+        # See new person selected
+        person1 = models.Person.objects.get(name="Test Person 1")
+        self.assertEqual(person1.name, form.find_element_by_xpath(
+            '//button[@data-id="id_person"]/span').text)
+        # and backend
+        option = form.find_element_by_xpath(
+            '//select[@id="id_person"]//option[@selected="selected"]')
+        self.assertEqual(person1.pk, int(option.get_attribute("value")))
 
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Person 2")
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@type="submit"]').click()
-            wait.until(animation_is_finished())
-            self.assertFalse(modal.is_displayed())
+        # Change mind and add another
+        wait.until(animation_is_finished())
+        add_person_button.click()
 
-            person2 = models.Person.objects.get(name="Test Person 2")
-            self.assertEqual(person2.name, form.find_element_by_xpath(
-                '//button[@data-id="id_person"]/span').text)
-            # Have to do this explcitly to force the wait for it to update
-            option = form.find_element_by_xpath(
-                '//select[@id="id_person"]//option[@selected="selected"]')
-            self.assertEqual(person2.pk, int(option.get_attribute("value")))
+        wait.until(animation_is_finished())
+        self.assertTrue(modal.is_displayed())
+        self.assertIn("Add Person", modal.find_element_by_tag_name('h3').text)
 
-            # Was right the first time, change it back
-            person_select = form.find_element_by_xpath(
-                '//button[@data-id="id_person"]')
-            person_select.send_keys(person1.name)
-            person_dropped = form.find_element_by_xpath(
-                '//ul[contains(@class, "inner selectpicker")]//span[contains(text(), "%s")]' % person1.name)
-            person_dropped.click()
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Person 2")
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@type="submit"]').click()
+        wait.until(animation_is_finished())
+        self.assertFalse(modal.is_displayed())
 
-            self.assertEqual(person1.name, form.find_element_by_xpath(
-                '//button[@data-id="id_person"]/span').text)
-            option = form.find_element_by_xpath(
-                '//select[@id="id_person"]//option[@selected="selected"]')
-            self.assertEqual(person1.pk, int(option.get_attribute("value")))
+        person2 = models.Person.objects.get(name="Test Person 2")
+        self.assertEqual(person2.name, form.find_element_by_xpath(
+            '//button[@data-id="id_person"]/span').text)
+        # Have to do this explcitly to force the wait for it to update
+        option = form.find_element_by_xpath(
+            '//select[@id="id_person"]//option[@selected="selected"]')
+        self.assertEqual(person2.pk, int(option.get_attribute("value")))
 
-            # Edit Person 1 to have a better name
-            form.find_element_by_xpath(
-                '//a[@data-target="#id_person" and contains(@href, "%s/edit/")]' % person1.pk).click()
-            wait.until(animation_is_finished())
-            self.assertTrue(modal.is_displayed())
-            self.assertIn("Edit Person", modal.find_element_by_tag_name('h3').text)
-            name = modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@id="id_name"]')
-            self.assertEqual(person1.name, name.get_attribute('value'))
-            name.clear()
-            name.send_keys('Rig ' + person1.name)
-            name.send_keys(Keys.ENTER)
+        # Was right the first time, change it back
+        person_select = form.find_element_by_xpath(
+            '//button[@data-id="id_person"]')
+        person_select.send_keys(person1.name)
+        person_dropped = form.find_element_by_xpath(
+            '//ul[contains(@class, "dropdown-menu")]//span[contains(text(), "%s")]' % person1.name)
+        person_dropped.click()
 
-            wait.until(animation_is_finished())
+        self.assertEqual(person1.name, form.find_element_by_xpath(
+            '//button[@data-id="id_person"]/span').text)
+        option = form.find_element_by_xpath(
+            '//select[@id="id_person"]//option[@selected="selected"]')
+        self.assertEqual(person1.pk, int(option.get_attribute("value")))
 
-            self.assertFalse(modal.is_displayed())
-            person1 = models.Person.objects.get(pk=person1.pk)
-            self.assertEqual(person1.name, form.find_element_by_xpath(
-                '//button[@data-id="id_person"]/span').text)
+        # Edit Person 1 to have a better name
+        form.find_element_by_xpath(
+            '//a[@data-target="#id_person" and contains(@href, "%s/edit/")]' % person1.pk).click()
+        wait.until(animation_is_finished())
+        self.assertTrue(modal.is_displayed())
+        self.assertIn("Edit Person", modal.find_element_by_tag_name('h3').text)
+        name = modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@id="id_name"]')
+        self.assertEqual(person1.name, name.get_attribute('value'))
+        name.clear()
+        name.send_keys('Rig ' + person1.name)
+        name.send_keys(Keys.ENTER)
 
-            # Create organisation
-            wait.until(animation_is_finished())
-            add_button = self.browser.find_element_by_xpath(
-                '//a[@data-target="#id_organisation" and contains(@href, "add")]')
-            add_button.click()
-            modal = self.browser.find_element_by_id('modal')
-            wait.until(animation_is_finished())
-            self.assertTrue(modal.is_displayed())
-            self.assertIn("Add Organisation", modal.find_element_by_tag_name('h3').text)
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Organisation")
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@type="submit"]').click()
+        wait.until(animation_is_finished())
 
-            # See it is selected
-            wait.until(animation_is_finished())
-            self.assertFalse(modal.is_displayed())
-            obj = models.Organisation.objects.get(name="Test Organisation")
-            self.assertEqual(obj.name, form.find_element_by_xpath(
-                '//button[@data-id="id_organisation"]/span').text)
-            # and backend
-            option = form.find_element_by_xpath(
-                '//select[@id="id_organisation"]//option[@selected="selected"]')
-            self.assertEqual(obj.pk, int(option.get_attribute("value")))
+        self.assertFalse(modal.is_displayed())
+        person1 = models.Person.objects.get(pk=person1.pk)
+        self.assertEqual(person1.name, form.find_element_by_xpath(
+            '//button[@data-id="id_person"]/span').text)
 
-            # Create venue
-            wait.until(animation_is_finished())
-            add_button = self.browser.find_element_by_xpath(
-                '//a[@data-target="#id_venue" and contains(@href, "add")]')
-            wait.until(animation_is_finished())
-            add_button.click()
-            wait.until(animation_is_finished())
-            modal = self.browser.find_element_by_id('modal')
-            wait.until(animation_is_finished())
-            self.assertTrue(modal.is_displayed())
-            self.assertIn("Add Venue", modal.find_element_by_tag_name('h3').text)
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Venue")
-            modal.find_element_by_xpath(
-                '//div[@id="modal"]//input[@type="submit"]').click()
+        # Create organisation
+        wait.until(animation_is_finished())
+        add_button = self.browser.find_element_by_xpath(
+            '//a[@data-target="#id_organisation" and contains(@href, "add")]')
+        add_button.click()
+        modal = self.browser.find_element_by_id('modal')
+        wait.until(animation_is_finished())
+        self.assertTrue(modal.is_displayed())
+        self.assertIn("Add Organisation", modal.find_element_by_tag_name('h3').text)
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Organisation")
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@type="submit"]').click()
 
-            # See it is selected
-            wait.until(animation_is_finished())
-            self.assertFalse(modal.is_displayed())
-            obj = models.Venue.objects.get(name="Test Venue")
-            self.assertEqual(obj.name, form.find_element_by_xpath(
-                '//button[@data-id="id_venue"]/span').text)
-            # and backend
-            option = form.find_element_by_xpath(
-                '//select[@id="id_venue"]//option[@selected="selected"]')
-            self.assertEqual(obj.pk, int(option.get_attribute("value")))
+        # See it is selected
+        wait.until(animation_is_finished())
+        self.assertFalse(modal.is_displayed())
+        obj = models.Organisation.objects.get(name="Test Organisation")
+        self.assertEqual(obj.name, form.find_element_by_xpath(
+            '//button[@data-id="id_organisation"]/span').text)
+        # and backend
+        option = form.find_element_by_xpath(
+            '//select[@id="id_organisation"]//option[@selected="selected"]')
+        self.assertEqual(obj.pk, int(option.get_attribute("value")))
 
-            # Set start date/time
-            form.find_element_by_id('id_start_date').send_keys('25/05/3015')
-            form.find_element_by_id('id_start_time').send_keys('06:59')
+        # Create venue
+        wait.until(animation_is_finished())
+        add_button = self.browser.find_element_by_xpath(
+            '//a[@data-target="#id_venue" and contains(@href, "add")]')
+        wait.until(animation_is_finished())
+        add_button.click()
+        wait.until(animation_is_finished())
+        modal = self.browser.find_element_by_id('modal')
+        wait.until(animation_is_finished())
+        self.assertTrue(modal.is_displayed())
+        self.assertIn("Add Venue", modal.find_element_by_tag_name('h3').text)
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@id="id_name"]').send_keys("Test Venue")
+        modal.find_element_by_xpath(
+            '//div[@id="modal"]//input[@type="submit"]').click()
 
-            # Set end date/time
-            form.find_element_by_id('id_end_date').send_keys('27/06/4000')
-            form.find_element_by_id('id_end_time').send_keys('07:00')
+        # See it is selected
+        wait.until(animation_is_finished())
+        self.assertFalse(modal.is_displayed())
+        obj = models.Venue.objects.get(name="Test Venue")
+        self.assertEqual(obj.name, form.find_element_by_xpath(
+            '//button[@data-id="id_venue"]/span').text)
+        # and backend
+        option = form.find_element_by_xpath(
+            '//select[@id="id_venue"]//option[@selected="selected"]')
+        self.assertEqual(obj.pk, int(option.get_attribute("value")))
 
-            # Add item
-            form.find_element_by_xpath('//button[contains(@class, "item-add")]').click()
-            wait.until(animation_is_finished())
-            modal = self.browser.find_element_by_id("itemModal")
-            modal.find_element_by_id("item_name").send_keys("Test Item 1")
-            modal.find_element_by_id("item_description").send_keys(
-                "This is an item description\nthat for reasons unkown spans two lines")
-            e = modal.find_element_by_id("item_quantity")
-            e.click()
-            e.send_keys(Keys.UP)
-            e.send_keys(Keys.UP)
-            e = modal.find_element_by_id("item_cost")
-            e.send_keys("23.95")
-            e.send_keys(Keys.ENTER)  # enter submit
+        # Set start date/time
+        form.find_element_by_id('id_start_date').send_keys('25/05/3015')
+        form.find_element_by_id('id_start_time').send_keys('06:59')
 
-            # Confirm item has been saved to json field
-            objectitems = self.browser.execute_script("return objectitems;")
-            self.assertEqual(1, len(objectitems))
-            testitem = objectitems["-1"]['fields']  # as we are deliberately creating this we know the ID
-            self.assertEqual("Test Item 1", testitem['name'])
-            self.assertEqual("2", testitem['quantity'])  # test a couple of "worse case" fields
+        # Set end date/time
+        form.find_element_by_id('id_end_date').send_keys('27/06/4000')
+        form.find_element_by_id('id_end_time').send_keys('07:00')
 
-            # See new item appear in table
-            row = self.browser.find_element_by_id('item--1')  # ID number is known, see above
-            self.assertIn("Test Item 1", row.find_element_by_xpath('//span[@class="name"]').text)
-            self.assertIn("This is an item description",
-                          row.find_element_by_xpath('//div[@class="item-description"]').text)
-            self.assertEqual('£ 23.95', row.find_element_by_xpath('//tr[@id="item--1"]/td[2]').text)
-            self.assertEqual("2", row.find_element_by_xpath('//td[@class="quantity"]').text)
-            self.assertEqual('£ 47.90', row.find_element_by_xpath('//tr[@id="item--1"]/td[4]').text)
+        # Add item
+        form.find_element_by_xpath('//button[contains(@class, "item-add")]').click()
+        wait.until(animation_is_finished())
+        modal = self.browser.find_element_by_id("itemModal")
+        modal.find_element_by_id("item_name").send_keys("Test Item 1")
+        modal.find_element_by_id("item_description").send_keys(
+            "This is an item description\nthat for reasons unknown spans two lines")
+        e = modal.find_element_by_id("item_quantity")
+        e.click()
+        e.send_keys(Keys.UP)
+        e.send_keys(Keys.UP)
+        e = modal.find_element_by_id("item_cost")
+        e.send_keys("23.95")
+        e.send_keys(Keys.ENTER)  # enter submit
 
-            # Check totals
-            self.assertEqual("47.90", self.browser.find_element_by_id('sumtotal').text)
-            self.assertIn("(TBC)", self.browser.find_element_by_id('vat-rate').text)
-            self.assertEqual("9.58", self.browser.find_element_by_id('vat').text)
-            self.assertEqual("57.48", self.browser.find_element_by_id('total').text)
+        # Confirm item has been saved to json field
+        objectitems = self.browser.execute_script("return objectitems;")
+        self.assertEqual(1, len(objectitems))
+        testitem = objectitems["-1"]['fields']  # as we are deliberately creating this we know the ID
+        self.assertEqual("Test Item 1", testitem['name'])
+        self.assertEqual("2", testitem['quantity'])  # test a couple of "worse case" fields
 
-            # Attempt to save - missing title
-            save.click()
+        # See new item appear in table
+        row = self.browser.find_element_by_id('item--1')  # ID number is known, see above
+        self.assertIn("Test Item 1", row.find_element_by_xpath('//span[@class="name"]').text)
+        self.assertIn("This is an item description",
+                      row.find_element_by_xpath('//div[@class="item-description"]').text)
+        self.assertEqual('£ 23.95', row.find_element_by_xpath('//tr[@id="item--1"]/td[2]').text)
+        self.assertEqual("2", row.find_element_by_xpath('//td[@class="quantity"]').text)
+        self.assertEqual('£ 47.90', row.find_element_by_xpath('//tr[@id="item--1"]/td[4]').text)
 
-            # See error
-            error = self.browser.find_element_by_xpath('//div[contains(@class, "alert-danger")]')
-            self.assertTrue(error.is_displayed())
-            # Should only have one error message
-            self.assertEqual("Name", error.find_element_by_xpath('//dt[1]').text)
-            self.assertEqual("This field is required.", error.find_element_by_xpath('//dd[1]/ul/li').text)
-            # don't need error so close it
-            error.find_element_by_xpath('//div[contains(@class, "alert-danger")]//button[@class="close"]').click()
-            try:
-                self.assertFalse(error.is_displayed())
-            except StaleElementReferenceException:
-                pass
-            except BaseException:
-                self.assertFail("Element does not appear to have been deleted")
+        # Check totals
+        self.assertEqual("47.90", self.browser.find_element_by_id('sumtotal').text)
+        self.assertIn("(TBC)", self.browser.find_element_by_id('vat-rate').text)
+        self.assertEqual("9.58", self.browser.find_element_by_id('vat').text)
+        self.assertEqual("57.48", self.browser.find_element_by_id('total').text)
 
-            # Check at least some data is preserved. Some = all will be there
-            option = self.browser.find_element_by_xpath(
-                '//select[@id="id_person"]//option[@selected="selected"]')
-            self.assertEqual(person1.pk, int(option.get_attribute("value")))
+        save = self.browser.find_element_by_xpath(
+            '(//button[@type="submit"])[3]')
+        save.click()
 
-            # Set title
-            e = self.browser.find_element_by_id('id_name')
-            e.send_keys('Test Event Name')
-            e.send_keys(Keys.ENTER)
+        # TODO Testing of requirement for contact details
 
-            # See redirected to success page
-            successTitle = self.browser.find_element_by_xpath('//h1').text
-            event = models.Event.objects.get(name='Test Event Name')
-
-            self.assertIn("N%05d | Test Event Name" % event.pk, successTitle)
-        except WebDriverException:
-            # This is a dirty workaround for wercker being a bit funny and not running it correctly.
-            # Waiting for wercker to get back to me about this
-            pass
+        # TODO Something seems broken with the CI tests here.
+        # See redirected to success page
+        # successTitle = self.browser.find_element_by_xpath('//h1').text
+        # event = models.Event.objects.get(name='Test Event Name')
+        # self.assertIn("N%05d | Test Event Name" % event.pk, successTitle)
 
     def testEventDuplicate(self):
+        client = models.Person.objects.create(name='Duplicate Test Person', email='duplicate@functional.test')
         testEvent = models.Event.objects.create(name="TE E1", status=models.Event.PROVISIONAL,
                                                 start_date=date.today() + timedelta(days=6),
                                                 description="start future no end",
                                                 purchase_order='TESTPO',
+                                                person=client,
                                                 auth_request_by=self.profile,
                                                 auth_request_at=self.create_datetime(2015, 0o6, 0o4, 10, 00),
                                                 auth_request_to="some@email.address")
@@ -533,7 +510,7 @@ class EventTest(LiveServerTestCase):
         modal = self.browser.find_element_by_id("itemModal")
         modal.find_element_by_id("item_name").send_keys("Test Item 3")
         modal.find_element_by_id("item_description").send_keys(
-            "This is an item description\nthat for reasons unkown spans two lines")
+            "This is an item description\nthat for reasons unknown spans two lines")
         e = modal.find_element_by_id("item_quantity")
         e.click()
         e.send_keys(Keys.UP)
@@ -606,6 +583,15 @@ class EventTest(LiveServerTestCase):
         e = self.browser.find_element_by_id('id_name')
         e.send_keys('Test Event Name')
 
+        # Set person
+        person = models.Person.objects.create(name='Date Validation Person', email='datevalidation@functional.test')
+        person_select = form.find_element_by_xpath(
+                '//button[@data-id="id_person"]')
+        person_select.send_keys(person.name)
+        person_dropped = form.find_element_by_xpath(
+            '//ul[contains(@class, "dropdown-menu")]//span[contains(text(), "%s")]' % person.name)
+        person_dropped.click()
+
         # Both dates, no times, end before start
         self.browser.execute_script("document.getElementById('id_start_date').value='3015-04-24'")
 
@@ -711,6 +697,15 @@ class EventTest(LiveServerTestCase):
         e = self.browser.find_element_by_id('id_name')
         e.send_keys('Test Event Name')
 
+        # Set person
+        person = models.Person.objects.create(name='Rig Non-Rig Person', email='rignonrig@functional.test')
+        person_select = form.find_element_by_xpath(
+                '//button[@data-id="id_person"]')
+        person_select.send_keys(person.name)
+        person_dropped = form.find_element_by_xpath(
+            '//ul[contains(@class, "dropdown-menu")]//span[contains(text(), "%s")]' % person.name)
+        person_dropped.click()
+
         # Set an arbitrary date
         self.browser.execute_script("document.getElementById('id_start_date').value='3015-04-24'")
 
@@ -772,9 +767,9 @@ class EventTest(LiveServerTestCase):
         organisationPanel = self.browser.find_element_by_xpath('//div[contains(text(), "Contact Details")]/..')
 
     def testEventEdit(self):
-        person = models.Person(name="Event Edit Person", email="eventdetail@person.tests.rigs", phone="123 123").save()
-        organisation = models.Organisation(name="Event Edit Organisation", email="eventdetail@organisation.tests.rigs", phone="123 456").save()
-        venue = models.Venue(name="Event Detail Venue").save()
+        person = models.Person.objects.create(name="Event Edit Person", email="eventdetail@person.tests.rigs", phone="123 123")
+        organisation = models.Organisation.objects.create(name="Event Edit Organisation", email="eventdetail@organisation.tests.rigs", phone="123 456")
+        venue = models.Venue.objects.create(name="Event Detail Venue")
 
         eventData = {
             'name': "Detail Test",

RIGS/urls.py

@@ -19,7 +19,7 @@ urlpatterns = [
     url('^user/login/$', views.login, name='login'),
     url('^user/login/embed/$', xframe_options_exempt(views.login_embed), name='login_embed'),
 
-    url(r'^user/password_reset/$', password_reset, {'password_reset_form': forms.PasswordReset}),
+    url(r'^user/password_reset/$', views.PasswordResetDisabled.as_view()),
 
     # People
     url(r'^people/$', permission_required_with_403('RIGS.view_person')(views.PersonList.as_view()),

RIGS/views.py

@@ -392,3 +392,7 @@ class ResetApiKey(generic.RedirectView):
         self.request.user.save()
 
         return reverse_lazy('profile_detail')
+
+
+class PasswordResetDisabled(generic.TemplateView):
+    template_name = "RIGS/password_reset_disable.html"

assets/templates/asset_embed.html

@@ -0,0 +1,40 @@
+{% extends 'base_embed.html' %}
+{% load static from staticfiles %}
+
+{% block content %}
+
+<div class="row">
+    <div class="col-sm-12">
+        <a href="/assets">
+            <span class="source"> TEC Asset Database</span>
+        </a>
+    </div>
+
+    <div class="col-sm-12">
+        <h3><a href="{% url 'asset_detail' object.asset_id %}">Asset: {{ object.asset_id }} | {{ object.description }} </a></h3>
+        <h4>
+        <span class="label label-default">
+            <strong>Category:</strong>
+            {{ object.category }}
+        </span>
+        &nbsp;
+        <span class="label label-{{ object.status.display_class|default:'default' }}">
+            <strong>Status:</strong>
+            {{ object.status }}
+        </span>
+        </h4>
+        {% if object.serial_number %}
+            <dt>Serial Number: </dt>
+            <dd>{{ object.serial_number }}</dd>
+        {% endif %}
+        {% if object.comments %}
+            <dt>Comments: </dt>
+            <dd class="dont-break-out">{{ object.comments|linebreaksbr }}<dd>
+        {% endif %}
+
+        </table>
+    </div>
+</div>
+
+
+{% endblock %}

assets/templates/asset_update.html

@@ -44,7 +44,7 @@
   </div>
 </form>
 
-{% if not edit %}
+{% if not edit and perms.assets.view_asset %}
 <div class="col-sm-12 text-right">
     <div>
         <a href="{% url 'asset_history' object.asset_id %}" title="View Revision History">

assets/urls.py

@@ -3,24 +3,34 @@ from django.urls import path
 from assets import views, models
 from RIGS import versioning
 
-from PyRIGS.decorators import permission_required_with_403
+from django.contrib.auth.decorators import login_required
+from django.views.decorators.clickjacking import xframe_options_exempt
+from PyRIGS.decorators import has_oembed, permission_required_with_403
 
 urlpatterns = [
     path('', views.AssetList.as_view(), name='asset_index'),
     path('asset/list/', views.AssetList.as_view(), name='asset_list'),
-    path('asset/id/<str:pk>/', views.AssetDetail.as_view(), name='asset_detail'),
+    # Lazy way to enable the oembed redirect...
+    path('asset/id/<str:pk>/', has_oembed(oembed_view="asset_oembed")(views.AssetDetail.as_view()), name='asset_detail'),
     path('asset/create/', permission_required_with_403('assets.add_asset')
          (views.AssetCreate.as_view()), name='asset_create'),
     path('asset/id/<str:pk>/edit/', permission_required_with_403('assets.change_asset')
          (views.AssetEdit.as_view()), name='asset_update'),
     path('asset/id/<str:pk>/duplicate/', permission_required_with_403('assets.add_asset')
          (views.AssetDuplicate.as_view()), name='asset_duplicate'),
-    path('asset/id/<str:pk>/history/', views.AssetVersionHistory.as_view(),
+    path('asset/id/<str:pk>/history/', permission_required_with_403('assets.view_asset')(views.AssetVersionHistory.as_view()),
          name='asset_history', kwargs={'model': models.Asset}),
     path('activity', permission_required_with_403('assets.view_asset')
          (views.ActivityTable.as_view()), name='asset_activity_table'),
 
     path('asset/search/', views.AssetSearch.as_view(), name='asset_search_json'),
+    path('asset/id/<str:pk>/embed/',
+         xframe_options_exempt(
+                               login_required(login_url='/user/login/embed/')(views.AssetEmbed.as_view())),
+         name='asset_embed'),
+    path('asset/id/<str:pk>/oembed_json/',
+         views.AssetOembed.as_view(),
+         name='asset_oembed'),
 
     path('supplier/list', views.SupplierList.as_view(), name='supplier_list'),
     path('supplier/<int:pk>', views.SupplierDetail.as_view(), name='supplier_detail'),

assets/views.py

@@ -1,5 +1,6 @@
 from django.contrib.auth.mixins import LoginRequiredMixin
 from django.http import JsonResponse
+from django.http import HttpResponse
 from django.views import generic
 from django.views.decorators.csrf import csrf_exempt
 from django.utils.decorators import method_decorator
@@ -9,6 +10,8 @@ from django.shortcuts import get_object_or_404
 from assets import models, forms
 from RIGS import versioning
 
+import simplejson
+
 
 @method_decorator(csrf_exempt, name='dispatch')
 class AssetList(LoginRequiredMixin, generic.ListView):
@@ -149,6 +152,28 @@ class AssetDuplicate(DuplicateMixin, AssetIDUrlMixin, AssetCreate):
         return context
 
 
+class AssetOembed(generic.View):
+    model = models.Asset
+
+    def get(self, request, pk=None):
+        embed_url = reverse('asset_embed', args=[pk])
+        full_url = "{0}://{1}{2}".format(request.scheme, request.META['HTTP_HOST'], embed_url)
+
+        data = {
+            'html': '<iframe src="{0}" frameborder="0" width="100%" height="250"></iframe>'.format(full_url),
+            'version': '1.0',
+            'type': 'rich',
+            'height': '250'
+        }
+
+        json = simplejson.JSONEncoderForHTML().encode(data)
+        return HttpResponse(json, content_type="application/json")
+
+
+class AssetEmbed(AssetDetail):
+    template_name = 'asset_embed.html'
+
+
 class SupplierList(generic.ListView):
     model = models.Supplier
     template_name = 'supplier_list.html'
@@ -213,8 +238,9 @@ class SupplierVersionHistory(versioning.VersionHistory):
     template_name = "asset_version_history.html"
 
 
-# TODO: Reduce SQL queries
 class AssetVersionHistory(versioning.VersionHistory):
+    template_name = "asset_version_history.html"
+
     def get_object(self, **kwargs):
         return get_object_or_404(models.Asset, asset_id=self.kwargs['pk'])
 

templates/base_assets.html

@@ -10,7 +10,7 @@
 {% endblock %}
 
 {% block titleelements %}
-    {% if perms.assets.view_asset %}
+    {# % if perms.assets.view_asset % #}
         <li class="dropdown">
             <a href="#" class="dropdown-toggle" data-toggle="dropdown">Assets<b class="caret"></b></a>
             <ul class="dropdown-menu">
@@ -20,19 +20,19 @@
                 {% endif %}
             </ul>
         </li>
-    {% endif %}
-    {% if perms.assets.view_supplier %}
+    {# % endif % #}
+    {# % if perms.assets.view_supplier % #}
         <li class="dropdown">
             <a href="#" class="dropdown-toggle" data-toggle="dropdown"> Suppliers<b class="caret"></b></a>
             <ul class="dropdown-menu">
                 <li><a href="{% url 'supplier_list' %}"><span class="glyphicon glyphicon-list"></span>
                     List Suppliers</a></li>
-                {% if perms.assets.add_asset %}
+                {% if perms.assets.add_supplier %}
                     <li><a href="{% url 'supplier_create' %}"><span class="glyphicon glyphicon-plus"></span> Create Supplier</a></li>
                 {% endif %}
             </ul>
         </li>
-    {% endif %}
+    {# % endif % #}
     {% if perms.assets.view_asset %}
         <li><a href="{% url 'asset_activity_table' %}">Recent Changes</a></li>
     {% endif %}