import pytest
from django.contrib.auth.models import AnonymousUser

from intent.access import project_access, visible_projects
from intent.orgs.models import OrgMembership
from intent.projects.models import ProjectMembership, Visibility


def _flags(user, project):
    a = project_access(user, project)
    return (a.can_view, a.can_contribute, a.can_edit, a.can_admin)


@pytest.fixture
def people(make_user, org, project, owner, collaborator, editor):
    project_owner = make_user("pam")
    OrgMembership.objects.create(org=org, user=project_owner)
    ProjectMembership.objects.create(project=project, user=project_owner, role="owner")
    return {
        "anonymous": AnonymousUser(),
        "outsider": make_user(),
        "staff": make_user(is_staff=True),
        "org collaborator": collaborator,
        "project collaborator": editor,
        "project owner": project_owner,
        "org owner": owner,
    }


# (view, contribute, edit, admin) per visibility, without open contribution.
EXPECTED = {
    Visibility.PRIVATE: {
        "anonymous": (False, False, False, False),
        "outsider": (False, False, False, False),
        "staff": (False, False, False, False),
        "org collaborator": (False, False, False, False),
        "project collaborator": (True, True, True, False),
        "project owner": (True, True, True, True),
        "org owner": (True, True, True, True),
    },
    Visibility.AUTHENTICATED: {
        "anonymous": (False, False, False, False),
        "outsider": (True, False, False, False),
        "staff": (False, False, False, False),
        "org collaborator": (True, False, False, False),
        "project collaborator": (True, True, True, False),
        "project owner": (True, True, True, True),
        "org owner": (True, True, True, True),
    },
    Visibility.PUBLIC: {
        "anonymous": (True, False, False, False),
        "outsider": (True, False, False, False),
        "staff": (True, False, False, False),
        "org collaborator": (True, False, False, False),
        "project collaborator": (True, True, True, False),
        "project owner": (True, True, True, True),
        "org owner": (True, True, True, True),
    },
}


@pytest.mark.parametrize("visibility", list(EXPECTED))
def test_access_matrix(people, project, visibility):
    project.visibility = visibility
    project.save()
    for who, user in people.items():
        assert _flags(user, project) == EXPECTED[visibility][who], who


def test_open_contribution_lets_signed_in_viewers_contribute(people, project):
    project.visibility = Visibility.PUBLIC
    project.open_contribution = True
    project.save()
    assert project_access(people["outsider"], project).can_contribute
    assert project_access(people["org collaborator"], project).can_contribute
    assert not project_access(people["anonymous"], project).can_contribute
    assert not project_access(people["staff"], project).can_contribute
    assert not project_access(people["outsider"], project).can_edit


def test_visible_projects(people, org, project):
    assert list(visible_projects(people["org owner"], org)) == [project]
    assert list(visible_projects(people["project collaborator"], org)) == [project]
    assert list(visible_projects(people["org collaborator"], org)) == []
    assert list(visible_projects(people["anonymous"], org)) == []
    project.visibility = Visibility.AUTHENTICATED
    project.save()
    assert list(visible_projects(people["outsider"], org)) == [project]
    assert list(visible_projects(people["anonymous"], org)) == []