You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
58 lines
2.0 KiB
58 lines
2.0 KiB
|
|
# Copyright (C) 2015 Akretion (<http://www.akretion.com>)
|
|
# @author: Florian da Costa
|
|
# License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl.html).
|
|
|
|
import base64
|
|
from odoo.tests.common import TransactionCase
|
|
from odoo.exceptions import Warning as UserError
|
|
|
|
|
|
class TestExportSqlQuery(TransactionCase):
|
|
|
|
def setUp(self):
|
|
super(TestExportSqlQuery, self).setUp()
|
|
self.sql_export_obj = self.env['sql.export']
|
|
self.wizard_obj = self.env['sql.file.wizard']
|
|
self.sql_report_demo = self.env.ref('sql_export.sql_export_partner')
|
|
|
|
def test_sql_query(self):
|
|
wizard = self.wizard_obj.create({
|
|
'sql_export_id': self.sql_report_demo.id,
|
|
})
|
|
wizard.export_sql()
|
|
export = base64.b64decode(wizard.binary_file)
|
|
self.assertEqual(export.split(';')[0], 'name')
|
|
self.assertTrue(len(export.split(';')) > 6)
|
|
|
|
def test_prohibited_queries(self):
|
|
prohibited_queries = [
|
|
"upDaTe res_partner SET name = 'test' WHERE id = 1",
|
|
"DELETE FROM sql_export WHERE name = 'test';",
|
|
" DELETE FROM sql_export WHERE name = 'test' ;",
|
|
"""DELETE
|
|
FROM
|
|
sql_export
|
|
WHERE name = 'test'
|
|
""",
|
|
]
|
|
for query in prohibited_queries:
|
|
with self.assertRaises(UserError):
|
|
sql_export = self.sql_export_obj.create({
|
|
'name': 'test_prohibited',
|
|
'query': query})
|
|
sql_export.button_validate_sql_expression()
|
|
|
|
def test_authorized_queries(self):
|
|
authorized_queries = [
|
|
"SELECT create_date FROM res_partner",
|
|
]
|
|
|
|
for query in authorized_queries:
|
|
sql_export = self.sql_export_obj.create({
|
|
'name': 'test_authorized',
|
|
'query': query})
|
|
sql_export.button_validate_sql_expression()
|
|
self.assertEqual(
|
|
sql_export.state, 'sql_valid',
|
|
"%s is a valid request" % (query))
|