Proyectos de Subversion Moodle

@tool @tool_dataprivacy

Feature: Data export from the privacy API

  In order to export data for users and meet legal requirements

  As an admin, user, or parent

  I need to be able to export data for a user

  Background:

    Given the following "users" exist:

      | username  | firstname      | lastname  | institution |

      | victim    | Victim User    | 1         | University1 |

      | victim2   | Victim User    | 2         | University2 |

      | requester | The            | Requester | University3 |

      | parent    | Long-suffering | Parent    |             |

    And the following "roles" exist:

      | shortname | name  | archetype |

      | tired     | Tired |           |

    And the following "permission overrides" exist:

      | capability                                   | permission | role    | contextlevel | reference |

      | tool/dataprivacy:makedatarequestsforchildren | Allow      | tired   | System       |           |

      | tool/dataprivacy:managedatarequests          | Allow      | manager | System       |           |

      | moodle/site:viewuseridentity                 | Prevent    | manager | System       |           |

    And the following "role assigns" exist:

      | user   | role  | contextlevel | reference |

      | parent | tired | User         | victim    |

    And the following "system role assigns" exist:

      | user      | role    | contextlevel |

      | requester | manager | User         |

    And the following config values are set as admin:

      | contactdataprotectionofficer | 1  | tool_dataprivacy |

      | privacyrequestexpiry         | 55 | tool_dataprivacy |

      | dporoles                     | 1  | tool_dataprivacy |

    And the following data privacy "categories" exist:

      | name          |

      | Site category |

    And the following data privacy "purposes" exist:

      | name         | retentionperiod |

      | Site purpose | P10Y           |

    And I set the site category and purpose to "Site category" and "Site purpose"

  @javascript

  Scenario: As admin, export data for a user and download it, unless it has expired

    Given I log in as "admin"

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I follow "New request"

    And I set the field "User" to "Victim User 1"

    And I press "Save changes"

    Then I should see "Victim User 1"

    And I should see "Awaiting approval" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And I follow "Approve request"

    And I press "Approve request"

    And I should see "Approved" in the "Victim User 1" "table_row"

    And I run all adhoc tasks

    And I reload the page

    And I should see "Download ready" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And following "Download" should download between "1" and "200000" bytes

    And the following config values are set as admin:

      | privacyrequestexpiry | 1 | tool_dataprivacy |

    And I wait "1" seconds

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I should see "Expired" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And I should not see "Download"

  @javascript

  Scenario: As a student, request data export and then download it when approved, unless it has expired

    Given I log in as "victim"

    And I follow "Profile" in the user menu

    And I follow "Data requests"

    And I follow "New request"

    And I press "Save changes"

    Then I should see "Export all of my personal data"

    And I should see "Awaiting approval" in the "Export all of my personal data" "table_row"

    And I log out

    And I log in as "admin"

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I open the action menu in "Victim User 1" "table_row"

    And I follow "Approve request"

    And I press "Approve request"

    And I log out

    And I log in as "victim"

    And I follow "Profile" in the user menu

    And I follow "Data requests"

    And I should see "Approved" in the "Export all of my personal data" "table_row"

    And I run all adhoc tasks

    And I reload the page

    And I should see "Download ready" in the "Export all of my personal data" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And following "Download" should download between "1" and "200000" bytes

    And the following config values are set as admin:

      | privacyrequestexpiry | 1 | tool_dataprivacy |

    And I wait "1" seconds

    And I reload the page

    And I should see "Expired" in the "Export all of my personal data" "table_row"

    And I should not see "Actions"

  @javascript

  Scenario: As a parent, request data export for my child because I don't trust the little blighter

    Given I log in as "parent"

    And I follow "Profile" in the user menu

    And I follow "Data requests"

    And I follow "New request"

    And I set the field "User" to "Victim User 1"

    And I press "Save changes"

    Then I should see "Victim User 1"

    And I should see "Awaiting approval" in the "Victim User 1" "table_row"

    And I log out

    And I log in as "admin"

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I open the action menu in "Victim User 1" "table_row"

    And I follow "Approve request"

    And I press "Approve request"

    And I log out

    And I log in as "parent"

    And I follow "Profile" in the user menu

    And I follow "Data requests"

    And I should see "Approved" in the "Victim User 1" "table_row"

    And I run all adhoc tasks

    And I reload the page

    And I should see "Download ready" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And following "Download" should download between "1" and "200000" bytes

    And the following config values are set as admin:

      | privacyrequestexpiry | 1 | tool_dataprivacy |

    And I wait "1" seconds

    And I reload the page

    And I should see "Expired" in the "Victim User 1" "table_row"

    And I should not see "Actions"

  @javascript

  Scenario: Test search for user using extra field.

    Given the following "permission overrides" exist:

      | capability                   | permission | role    | contextlevel | reference |

      | moodle/site:viewuseridentity | Allow      | manager | System       |           |

    And the following config values are set as admin:

      | showuseridentity | institution |

    And I log in as "requester"

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I follow "New request"

    And I set the field "Search" to "University1"

    Then I should see "Victim User 1"

    When I reload the page

    And I set the field "Search" to "University2"

    Then I should see "Victim User 2"

  Scenario: Request data export as student with automatic approval turned on

    Given the following config values are set as admin:

      | automaticdataexportapproval | 1  | tool_dataprivacy |

    And I log in as "victim"

    And I follow "Profile" in the user menu

    And I follow "Export all of my personal data"

    When I press "Save changes"

    Then I should see "Your request has been submitted and will be processed soon."

    And I should see "Approved" in the "Export all of my personal data" "table_row"

  @javascript

  Scenario: As admin, enable allow filtering of exports by course setting, export data for a user and download it

    Given the following config values are set as admin:

      | allowfiltering | 1 | tool_dataprivacy |

    And I log in as "admin"

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I follow "New request"

    And I set the field "User" to "Victim User 1"

    And I should see "Export my personal data"

    And I press "Save changes"

    Then I should see "Victim User 1"

    And I should see "Pending" in the "Victim User 1" "table_row"

    And I run all adhoc tasks

    And I reload the page

    And I should see "Awaiting approval" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And I follow "Approve request (all data)"

    And I press "Approve request"

    And I should see "Approved" in the "Victim User 1" "table_row"

    And I run all adhoc tasks

    And I reload the page

    And I should see "Download ready" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And following "Download" should download between "1" and "172000" bytes

    And the following config values are set as admin:

      | privacyrequestexpiry | 1 | tool_dataprivacy |

    And I wait "1" seconds

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I should see "Expired" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And I should not see "Download"

  @javascript

  Scenario: As admin, enable allow filtering of exports by course setting, filter before export data for a user and download it

    Given the following "courses" exist:

      | fullname | shortname |

      | Course 1 | C1        |

      | Course 2 | C2        |

      | Coruse 3 | C3        |

    And the following "course enrolments" exist:

      | user    | course | role    |

      | victim  | C1     | student |

      | victim  | C2     | student |

    And the following config values are set as admin:

      | allowfiltering | 1 | tool_dataprivacy |

    And I log in as "admin"

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I follow "New request"

    And I set the field "User" to "Victim User 1"

    And I press "Save changes"

    Then I should see "Victim User 1"

    And I run all adhoc tasks

    And I reload the page

    And I open the action menu in "Victim User 1" "table_row"

    And I follow "Approve request (data from selected courses)"

    And I should see "Course 1"

    And I should see "Course 2"

    And I should not see "Course 3"

    And I press "Approve request"

    And I should see "You must select at least one course"

    And I set the field "Select courses to export" to "Course 1"

    And I press "Approve request"

    And I should see "Approved" in the "Victim User 1" "table_row"

    And I run all adhoc tasks

    And I reload the page

    And I should see "Download ready" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And following "Download" should download between "1" and "180000" bytes

  @javascript

  Scenario: Filter before export data for a user and download it in the view request action

    Given the following "courses" exist:

      | fullname | shortname |

      | Course 1 | C1        |

      | Course 2 | C2        |

      | Coruse 3 | C3        |

    And the following "course enrolments" exist:

      | user    | course | role    |

      | victim  | C1     | student |

      | victim  | C2     | student |

    And the following config values are set as admin:

      | allowfiltering | 1 | tool_dataprivacy |

    And I log in as "admin"

    And I navigate to "Users > Privacy and policies > Data requests" in site administration

    And I follow "New request"

    And I set the field "User" to "Victim User 1"

    And I press "Save changes"

    Then I should see "Victim User 1"

    And I run all adhoc tasks

    And I reload the page

    And I open the action menu in "Victim User 1" "table_row"

    And I follow "View the request"

    And I press "Approve selected courses"

    And I set the field "Select courses to export" to "Course 1"

    And I press "Approve request"

    And I should see "Approved" in the "Victim User 1" "table_row"

    And I run all adhoc tasks

    And I reload the page

    And I should see "Download ready" in the "Victim User 1" "table_row"

    And I open the action menu in "Victim User 1" "table_row"

    And following "Download" should download between "1" and "180000" bytes