Merge lp:~twom/launchpad/rescan-button-needs-less-permissions into lp:launchpad

[Tom Wardill]

Make the permissions for the Branch rescan more permissive.

Currently only the branch owner can rescan, this will allow product owners and commercial owners to also cause a rescan.

[Colin Watson (cjwatson)]

review: Needs Fixing

[Colin Watson (cjwatson)]

review: Approve

=== modified file 'lib/lp/code/browser/configure.zcml'
--- lib/lp/code/browser/configure.zcml	2019-01-31 13:48:34 +0000
+++ lib/lp/code/browser/configure.zcml	2019-02-07 17:12:49 +0000
@@ -446,7 +446,7 @@
         name="+rescan"
         for="lp.code.interfaces.branch.IBranch"
         class="lp.code.browser.branch.BranchRescanView"
-        permission="launchpad.Edit"
+        permission="launchpad.Moderate"
         template="../templates/branch-rescan.pt"/>
     <browser:page
         name="+edit-import"

=== modified file 'lib/lp/code/browser/tests/test_branch.py'
--- lib/lp/code/browser/tests/test_branch.py	2019-01-30 17:24:15 +0000
+++ lib/lp/code/browser/tests/test_branch.py	2019-02-07 17:12:49 +0000
@@ -649,6 +649,42 @@
         self.assertThat(recorder, HasQueryCount(Equals(30)))
 
 
+class TestBranchRescanView(BrowserTestCase):
+
+    layer = DatabaseFunctionalLayer
+
+    def test_owner_can_see_rescan(self):
+        branch = self.factory.makeAnyBranch()
+        job = BranchScanJob.create(branch)
+        job.job._status = JobStatus.FAILED
+        branch_url = canonical_url(
+            branch, view_name='+rescan', rootsite='code')
+        browser = self.getUserBrowser(branch_url, user=branch.owner)
+        browser.open(branch_url)
+        self.assertIn('schedule a rescan', browser.contents)
+
+    def test_product_owner_can_see_rescan(self):
+        project_owner = self.factory.makePerson()
+        product = self.factory.makeProduct(owner=project_owner)
+        branch = self.factory.makeAnyBranch(product=product)
+        job = BranchScanJob.create(branch)
+        job.job._status = JobStatus.FAILED
+        branch_url = canonical_url(
+            branch, view_name='+rescan', rootsite='code')
+        browser = self.getUserBrowser(branch_url, user=project_owner)
+        browser.open(branch_url)
+        self.assertIn('schedule a rescan', browser.contents)
+
+    def test_other_user_can_not_see_rescan(self):
+        branch = self.factory.makeAnyBranch()
+        job = BranchScanJob.create(branch)
+        job.job._status = JobStatus.FAILED
+        branch_url = canonical_url(
+            branch, view_name='+rescan', rootsite='code')
+        self.assertRaises(
+            Unauthorized, self.getUserBrowser, branch_url)
+
+
 class TestBranchViewPrivateArtifacts(BrowserTestCase):
     """ Tests that branches with private team artifacts can be viewed.