manager: hide export connector action to anonymous (#51811)

passerelle/templates/passerelle/manage/service_view.html

@@ -30,7 +30,9 @@
   {% if object|can_edit:request.user %}
   <li><a rel="popup" href="{% url 'logging-parameters' resource_type=object|resource_type resource_pk=object.id %}">{% trans 'Logging parameters' %}</a></li>
   {% endif %}
+  {% if request.user.is_authenticated %}
   <li><a download href="{% url 'export-connector' connector=object.get_connector_slug slug=object.slug %}">{% trans 'Export' %}</a></li>
+  {% endif %}
 </ul>
 {% endblock %}
 

tests/test_manager.py

@@ -543,6 +543,10 @@ def test_manager_import_export(app, admin_user):
         resource_pk=csv.pk,
     )
 
+    # cannot export if not connected
+    resp = app.get('/%s/%s/' % (csv.get_connector_slug(), csv.slug), status=200)
+    assert 'Export' not in resp.html.find('ul', {'class': 'extra-actions-menu'}).text
+
     # export site
     app = login(app)
     resp = app.get('/manage/')
@@ -576,6 +580,7 @@ def test_manager_import_export(app, admin_user):
 
     # export connector
     resp = app.get('/%s/%s/' % (csv.get_connector_slug(), csv.slug), status=200)
+    assert 'Export' in resp.html.find('ul', {'class': 'extra-actions-menu'}).text
     with freezegun.freeze_time('2020-09-01'):
         resp = resp.click('Export')
     assert resp.headers['content-type'] == 'application/json'