Fix to 6002

vaquer · vaquer · commit d8e27b726ba5 · 2018-05-14T17:13:46.000-04:00
diff --git a/cms/admin/forms.py b/cms/admin/forms.py
@@ -838,6 +838,12 @@ def _get_tree_options_for_parent(self, parent_node, position):
 
 
 class MovePageForm(PageTreeForm):
+    def clean(self):
+        cleaned_data = super().clean()
+
+        # The user doesn't have permission to do this anymore
+        if self.page.is_home and cleaned_data.get('target', None):
+            self.add_error('target', force_text(_('You can\'t move the home page to this place')))
 
     def get_tree_options(self):
         options = super(MovePageForm, self).get_tree_options()
diff --git a/cms/tests/test_page_admin.py b/cms/tests/test_page_admin.py
@@ -1145,6 +1145,24 @@ def test_move_page(self):
             page3 = Page.objects.get(pk=page3.pk)
             self.assertEqual(page3.get_path(), page_data2['slug'] + "/" + page_data3['slug'])
 
+    def test_user_cant_neast_home_page(self):
+        """
+        Users should not be able to move the home-page
+        inside another node of the tree.
+        """
+        homepage = create_page("home", "nav_playground.html", "en", published=True)
+        homepage.set_as_homepage()
+        home_sibling_1 = create_page("root-1", "nav_playground.html", "en", published=True)
+
+        payload = {'id': homepage.pk, 'position': 0, 'target': home_sibling_1}
+
+        with self.login_user_context(self.get_superuser()):
+            endpoint = self.get_admin_url(Page, 'move_page', homepage.pk)
+            response = self.client.post(endpoint, payload)
+
+            self.assertEqual(response.status_code, 200)
+            self.assertEqual(response.json().get('status', 400), 400)
+
     def test_move_home_page(self):
         """
         Users should be able to move the home-page
