Eloy Lafuente (stronk7)
777f654c28
Note that this issue is not the one causing this problem alone but just one more causing the download limits to be surpassed. Allowing 1000 more bytes to have some margin, as far as we are adding lots of new css stuff here and there.
164 lines
7.3 KiB
Gherkin
164 lines
7.3 KiB
Gherkin
@tool @tool_dataprivacy
|
|
Feature: Data export from the privacy API
|
|
In order to export data for users and meet legal requirements
|
|
As an admin, user, or parent
|
|
I need to be able to export data for a user
|
|
|
|
Background:
|
|
Given the following "users" exist:
|
|
| username | firstname | lastname | institution |
|
|
| victim | Victim User | 1 | University1 |
|
|
| victim2 | Victim User | 2 | University2 |
|
|
| requester | The | Requester | University3 |
|
|
| parent | Long-suffering | Parent | |
|
|
And the following "roles" exist:
|
|
| shortname | name | archetype |
|
|
| tired | Tired | |
|
|
And the following "permission overrides" exist:
|
|
| capability | permission | role | contextlevel | reference |
|
|
| tool/dataprivacy:makedatarequestsforchildren | Allow | tired | System | |
|
|
| tool/dataprivacy:managedatarequests | Allow | manager | System | |
|
|
| moodle/site:viewuseridentity | Prevent | manager | System | |
|
|
And the following "role assigns" exist:
|
|
| user | role | contextlevel | reference |
|
|
| parent | tired | User | victim |
|
|
And the following "system role assigns" exist:
|
|
| user | role | contextlevel |
|
|
| requester | manager | User |
|
|
And the following config values are set as admin:
|
|
| contactdataprotectionofficer | 1 | tool_dataprivacy |
|
|
| privacyrequestexpiry | 55 | tool_dataprivacy |
|
|
| dporoles | 1 | tool_dataprivacy |
|
|
And the following data privacy "categories" exist:
|
|
| name |
|
|
| Site category |
|
|
And the following data privacy "purposes" exist:
|
|
| name | retentionperiod |
|
|
| Site purpose | P10Y |
|
|
And I set the site category and purpose to "Site category" and "Site purpose"
|
|
|
|
@javascript
|
|
Scenario: As admin, export data for a user and download it, unless it has expired
|
|
Given I log in as "admin"
|
|
And I navigate to "Users > Privacy and policies > Data requests" in site administration
|
|
And I follow "New request"
|
|
And I set the field "User" to "Victim User 1"
|
|
And I press "Save changes"
|
|
Then I should see "Victim User 1"
|
|
And I should see "Awaiting approval" in the "Victim User 1" "table_row"
|
|
And I open the action menu in "Victim User 1" "table_row"
|
|
And I follow "Approve request"
|
|
And I press "Approve request"
|
|
And I should see "Approved" in the "Victim User 1" "table_row"
|
|
And I run all adhoc tasks
|
|
And I reload the page
|
|
And I should see "Download ready" in the "Victim User 1" "table_row"
|
|
And I open the action menu in "Victim User 1" "table_row"
|
|
And following "Download" should download between "1" and "146000" bytes
|
|
And the following config values are set as admin:
|
|
| privacyrequestexpiry | 1 | tool_dataprivacy |
|
|
And I wait "1" seconds
|
|
And I navigate to "Users > Privacy and policies > Data requests" in site administration
|
|
And I should see "Expired" in the "Victim User 1" "table_row"
|
|
And I open the action menu in "Victim User 1" "table_row"
|
|
And I should not see "Download"
|
|
|
|
@javascript
|
|
Scenario: As a student, request data export and then download it when approved, unless it has expired
|
|
Given I log in as "victim"
|
|
And I follow "Profile" in the user menu
|
|
And I follow "Data requests"
|
|
And I follow "New request"
|
|
And I press "Save changes"
|
|
Then I should see "Export all of my personal data"
|
|
And I should see "Awaiting approval" in the "Export all of my personal data" "table_row"
|
|
|
|
And I log out
|
|
And I log in as "admin"
|
|
And I navigate to "Users > Privacy and policies > Data requests" in site administration
|
|
And I open the action menu in "Victim User 1" "table_row"
|
|
And I follow "Approve request"
|
|
And I press "Approve request"
|
|
|
|
And I log out
|
|
And I log in as "victim"
|
|
And I follow "Profile" in the user menu
|
|
And I follow "Data requests"
|
|
And I should see "Approved" in the "Export all of my personal data" "table_row"
|
|
And I run all adhoc tasks
|
|
And I reload the page
|
|
And I should see "Download ready" in the "Export all of my personal data" "table_row"
|
|
And I open the action menu in "Victim User 1" "table_row"
|
|
And following "Download" should download between "1" and "146000" bytes
|
|
|
|
And the following config values are set as admin:
|
|
| privacyrequestexpiry | 1 | tool_dataprivacy |
|
|
And I wait "1" seconds
|
|
And I reload the page
|
|
|
|
And I should see "Expired" in the "Export all of my personal data" "table_row"
|
|
And I should not see "Actions"
|
|
|
|
@javascript
|
|
Scenario: As a parent, request data export for my child because I don't trust the little blighter
|
|
Given I log in as "parent"
|
|
And I follow "Profile" in the user menu
|
|
And I follow "Data requests"
|
|
And I follow "New request"
|
|
And I set the field "User" to "Victim User 1"
|
|
And I press "Save changes"
|
|
Then I should see "Victim User 1"
|
|
And I should see "Awaiting approval" in the "Victim User 1" "table_row"
|
|
|
|
And I log out
|
|
And I log in as "admin"
|
|
And I navigate to "Users > Privacy and policies > Data requests" in site administration
|
|
And I open the action menu in "Victim User 1" "table_row"
|
|
And I follow "Approve request"
|
|
And I press "Approve request"
|
|
|
|
And I log out
|
|
And I log in as "parent"
|
|
And I follow "Profile" in the user menu
|
|
And I follow "Data requests"
|
|
And I should see "Approved" in the "Victim User 1" "table_row"
|
|
And I run all adhoc tasks
|
|
And I reload the page
|
|
And I should see "Download ready" in the "Victim User 1" "table_row"
|
|
And I open the action menu in "Victim User 1" "table_row"
|
|
And following "Download" should download between "1" and "146000" bytes
|
|
|
|
And the following config values are set as admin:
|
|
| privacyrequestexpiry | 1 | tool_dataprivacy |
|
|
And I wait "1" seconds
|
|
And I reload the page
|
|
|
|
And I should see "Expired" in the "Victim User 1" "table_row"
|
|
And I should not see "Actions"
|
|
|
|
@javascript
|
|
Scenario: Test search for user using extra field.
|
|
Given the following "permission overrides" exist:
|
|
| capability | permission | role | contextlevel | reference |
|
|
| moodle/site:viewuseridentity | Allow | manager | System | |
|
|
And the following config values are set as admin:
|
|
| showuseridentity | institution |
|
|
And I log in as "requester"
|
|
And I navigate to "Users > Privacy and policies > Data requests" in site administration
|
|
And I follow "New request"
|
|
And I set the field "Search" to "University1"
|
|
Then I should see "Victim User 1"
|
|
When I reload the page
|
|
And I set the field "Search" to "University2"
|
|
Then I should see "Victim User 2"
|
|
|
|
Scenario: Request data export as student with automatic approval turned on
|
|
Given the following config values are set as admin:
|
|
| automaticdataexportapproval | 1 | tool_dataprivacy |
|
|
And I log in as "victim"
|
|
And I follow "Profile" in the user menu
|
|
And I follow "Export all of my personal data"
|
|
When I press "Save changes"
|
|
Then I should see "Your request has been submitted and will be processed soon."
|
|
And I should see "Approved" in the "Export all of my personal data" "table_row"
|