codeforlife-portal 5.33.5__py2.py3-none-any.whl → 8.9.9__py2.py3-none-any.whl

portal/tests/test_views.py

@@ -1,21 +1,30 @@
 import csv
 import io
 import json
-from datetime import timedelta, date
+from datetime import date, datetime, timedelta
+from unittest.mock import ANY, Mock, patch
 
-import PyPDF2
 import pytest
-from aimmo.models import Game
-from common.models import Teacher, UserSession, Student, Class, DailyActivity
+from common.mail import campaign_ids
+from common.models import (
+    Class,
+    DailyActivity,
+    School,
+    Student,
+    Teacher,
+    TotalActivity,
+    UserProfile,
+    UserSession,
+)
 from common.tests.utils.classes import create_class_directly
 from common.tests.utils.organisation import (
     create_organisation_directly,
     join_teacher_to_organisation,
 )
 from common.tests.utils.student import (
+    create_independent_student_directly,
     create_school_student_directly,
     create_student_with_direct_login,
-    create_independent_student_directly,
 )
 from common.tests.utils.teacher import signup_teacher_directly
 from django.contrib.auth.models import User
@@ -25,11 +34,21 @@ from django.utils import timezone
 from game.models import Level
 from game.tests.utils.attempt import create_attempt
 from game.tests.utils.level import create_save_level
+from pypdf import PdfReader
+from rest_framework.test import APIClient, APITestCase
 
 from deploy import captcha
+from portal.templatetags.app_tags import is_logged_in_as_admin_teacher
+from portal.views.api import anonymise
+from portal.views.cron.user import (
+    USER_DELETE_UNVERIFIED_ACCOUNT_DAYS,
+    USER_2ND_INACTIVE_REMINDER_DAYS,
+    USER_FINAL_INACTIVE_REMINDER_DAYS,
+    USER_RETENTION_PERIOD,
+)
 from portal.views.teacher.teach import (
-    REMINDER_CARDS_PDF_ROWS,
     REMINDER_CARDS_PDF_COLUMNS,
+    REMINDER_CARDS_PDF_ROWS,
     REMINDER_CARDS_PDF_WARNING_TEXT,
     count_student_details_click,
 )
@@ -39,8 +58,11 @@ class TestTeacherViews(TestCase):
     @classmethod
     def setUpTestData(cls):
         cls.email, cls.password = signup_teacher_directly()
+        cls.school = create_organisation_directly(cls.email)
         _, _, cls.class_access_code = create_class_directly(cls.email)
-        _, _, cls.student = create_school_student_directly(cls.class_access_code)
+        _, cls.password_student, cls.student = create_school_student_directly(
+            cls.class_access_code
+        )
 
     def login(self):
         c = Client()
@@ -49,7 +71,9 @@ class TestTeacherViews(TestCase):
 
     def test_reminder_cards(self):
         c = self.login()
-        url = reverse("teacher_print_reminder_cards", args=[self.class_access_code])
+        url = reverse(
+            "teacher_print_reminder_cards", args=[self.class_access_code]
+        )
 
         # First test with 2 dummy students
         NAME1 = "Test name"
@@ -69,10 +93,10 @@ class TestTeacherViews(TestCase):
 
         # read PDF, check there's only 1 page and that the correct student details show
         with io.BytesIO(response.content) as pdf_file:
-            file_reader = PyPDF2.PdfFileReader(pdf_file)
-            assert file_reader.getNumPages() == 1
+            file_reader = PdfReader(pdf_file)
+            assert len(file_reader.pages) == 1
 
-            page_text = file_reader.getPage(0).extractText()
+            page_text = file_reader.pages[0].extract_text()
             assert NAME1 in page_text
             assert NAME2 in page_text
             assert PASSWORD1 in page_text
@@ -83,7 +107,9 @@ class TestTeacherViews(TestCase):
         # page number
         students_per_page = REMINDER_CARDS_PDF_ROWS * REMINDER_CARDS_PDF_COLUMNS
         for _ in range(len(studentlist), students_per_page + 1):
-            studentlist.append({"name": NAME1, "password": PASSWORD1, "login_url": URL})
+            studentlist.append(
+                {"name": NAME1, "password": PASSWORD1, "login_url": URL}
+            )
 
         assert len(studentlist) == students_per_page + 1
 
@@ -93,11 +119,11 @@ class TestTeacherViews(TestCase):
 
         # Check there are 2 pages and that each page contains the warning text
         with io.BytesIO(response.content) as pdf_file:
-            file_reader = PyPDF2.PdfFileReader(pdf_file)
-            assert file_reader.getNumPages() == 2
+            file_reader = PdfReader(pdf_file)
+            assert len(file_reader.pages) == 2
 
-            page1_text = file_reader.getPage(0).extractText()
-            page2_text = file_reader.getPage(1).extractText()
+            page1_text = file_reader.pages[0].extract_text()
+            page2_text = file_reader.pages[1].extract_text()
             assert REMINDER_CARDS_PDF_WARNING_TEXT in page1_text
             assert REMINDER_CARDS_PDF_WARNING_TEXT in page2_text
 
@@ -122,7 +148,9 @@ class TestTeacherViews(TestCase):
         reader = csv.reader(io.StringIO(content))
 
         access_code = self.class_access_code
-        class_url = reverse("student_login", kwargs={"access_code": access_code})
+        class_url = reverse(
+            "student_login", kwargs={"access_code": access_code}
+        )
         row0 = next(reader)
         assert row0[0].strip() == access_code
         assert class_url in row0[1].strip()
@@ -147,9 +175,9 @@ class TestTeacherViews(TestCase):
 
     def test_organisation_kick_has_correct_permissions(self):
         teacher2_email, _ = signup_teacher_directly()
-        org_name, org_postcode = create_organisation_directly(self.email)
-        join_teacher_to_organisation(self.email, org_name, org_postcode, is_admin=True)
-        join_teacher_to_organisation(teacher2_email, org_name, org_postcode)
+        school = create_organisation_directly(self.email)
+        join_teacher_to_organisation(self.email, school.name, is_admin=True)
+        join_teacher_to_organisation(teacher2_email, school.name)
         teacher2_id = Teacher.objects.get(new_user__email=teacher2_email).id
 
         client = self.login()
@@ -161,7 +189,9 @@ class TestTeacherViews(TestCase):
 
     def test_daily_activity_student_details(self):
         c = self.login()
-        url = reverse("teacher_print_reminder_cards", args=[self.class_access_code])
+        url = reverse(
+            "teacher_print_reminder_cards", args=[self.class_access_code]
+        )
 
         data = {
             "data": json.dumps(
@@ -170,7 +200,7 @@ class TestTeacherViews(TestCase):
                         "name": self.student.new_user.first_name,
                         "password": self.student.new_user.password,
                         "login_url": self.student.login_id,
-                    },
+                    }
                 ]
             )
         }
@@ -207,6 +237,72 @@ class TestTeacherViews(TestCase):
         with pytest.raises(Exception):
             count_student_details_click("Wrong download method")
 
+    def test_release_verified_student(self):
+        c = Client()
+        student_login_url = reverse(
+            "student_login", args=[self.class_access_code]
+        )
+        response = c.post(
+            student_login_url,
+            {
+                "username": self.student.new_user.first_name,
+                "password": self.password_student,
+            },
+        )
+        assert response.status_code == 302
+
+        student = Student.objects.get(pk=self.student.pk)
+
+        assert student.user.is_verified
+
+        c.logout()
+        c.login(username=self.email, password=self.password)
+
+        teacher = Teacher.objects.factory(
+            "the", "teacher", "theteacher@foo.com", "password"
+        )
+        level = Level.objects.create()
+
+        level.owner = student.new_user.userprofile
+        level.shared_with.add(teacher.new_user)
+        level.save()
+
+        students_levels = Level.objects.filter(
+            owner=student.new_user.userprofile
+        ).all()
+
+        for level in students_levels.all():
+            assert level.shared_with.exists()
+
+        release_url = reverse(
+            "teacher_dismiss_students", args=[self.class_access_code]
+        )
+        response = c.post(
+            release_url,
+            {
+                "form-TOTAL_FORMS": 1,
+                "form-INITIAL_FORMS": 1,
+                "form-MIN_NUM_FORMS": 0,
+                "form-MAX_NUM_FORMS": 1000,
+                "form-0-orig_name": self.student.new_user.first_name,
+                "form-0-name": self.student.new_user.first_name,
+                "form-0-email": "independent@gmail.com",
+                "form-0-confirm_email": "independent@gmail.com",
+                "submit_dismiss": "",
+            },
+        )
+        assert response.status_code == 302
+
+        student = Student.objects.get(pk=self.student.pk)
+        assert not student.user.is_verified
+
+        students_levels = Level.objects.filter(
+            owner=student.new_user.userprofile
+        ).all()
+
+        for level in students_levels.all():
+            assert not level.shared_with.exists()
+
 
 class TestLoginViews(TestCase):
     @classmethod
@@ -260,11 +356,15 @@ class TestLoginViews(TestCase):
 
         if next_url:
             url = (
-                reverse("student_login", kwargs={"access_code": class_access_code})
+                reverse(
+                    "student_login", kwargs={"access_code": class_access_code}
+                )
                 + "?next=/"
             )
         else:
-            url = reverse("student_login", kwargs={"access_code": class_access_code})
+            url = reverse(
+                "student_login", kwargs={"access_code": class_access_code}
+            )
 
         c = Client()
         response = c.post(url, {"username": name, "password": password})
@@ -316,13 +416,17 @@ class TestLoginViews(TestCase):
         c = Client()
 
         resp = c.post(
-            reverse("student_login_access_code"), {"access_code": class_access_code}
+            reverse("student_login_access_code"),
+            {"access_code": class_access_code},
         )
         assert resp.status_code == 302
         nexturl = resp.url
         assert nexturl == reverse(
             "student_login",
-            kwargs={"access_code": class_access_code, "login_type": "classform"},
+            kwargs={
+                "access_code": class_access_code,
+                "login_type": "classform",
+            },
         )
         c.post(nexturl, {"username": name, "password": password})
 
@@ -343,7 +447,9 @@ class TestLoginViews(TestCase):
         _, _, name, password, class_access_code = self._set_up_test_data()
 
         c = Client()
-        url = reverse("student_login", kwargs={"access_code": class_access_code})
+        url = reverse(
+            "student_login", kwargs={"access_code": class_access_code}
+        )
         c.post(url, {"username": name, "password": password})
 
         # check if there's a UserSession data within the last 10 secs
@@ -364,8 +470,10 @@ class TestLoginViews(TestCase):
         randomname = "randomname"
 
         c = Client()
-        url = reverse("student_login", kwargs={"access_code": class_access_code})
-        resp = c.post(url, {"username": randomname, "password": "xx"})
+        url = reverse(
+            "student_login", kwargs={"access_code": class_access_code}
+        )
+        c.post(url, {"username": randomname, "password": "xx"})
 
         # check if there's a UserSession data within the last 10 secs
         now = timezone.now()
@@ -390,7 +498,9 @@ class TestLoginViews(TestCase):
 
     def test_student_direct_login(self):
         _, _, _, _, class_access_code = self._set_up_test_data()
-        student, login_id, _, _ = create_student_with_direct_login(class_access_code)
+        student, login_id, _, _ = create_student_with_direct_login(
+            class_access_code
+        )
 
         c = Client()
         assert c.login(user_id=student.new_user.id, login_id=login_id) == True
@@ -433,7 +543,7 @@ class TestLoginViews(TestCase):
 
 
 class TestViews(TestCase):
-    def test_covid_response_page(self):
+    def test_home_learning(self):
         c = Client()
         home_url = reverse("home")
         response = c.get(home_url)
@@ -445,11 +555,11 @@ class TestViews(TestCase):
 
         expected_html = '<a href="/home-learning">Home learning</a>'
 
-        self.assertIn(expected_html, html)
+        assert expected_html in html
 
         response = c.get(page_url)
 
-        self.assertEquals(200, response.status_code)
+        assert response.status_code == 200
 
     def test_contributor(self):
         c = Client()
@@ -461,56 +571,79 @@ class TestViews(TestCase):
         response = c.get(page_url)
         assert response.status_code == 200
 
+    def test_ten_year_map(self):
+        c = Client()
+        page_url = reverse("celebrate")
+        response = c.get(page_url)
+        assert response.status_code == 200
+
     def test_student_dashboard_view(self):
         teacher_email, teacher_password = signup_teacher_directly()
         create_organisation_directly(teacher_email)
         klass, _, class_access_code = create_class_directly(teacher_email)
-        student_name, student_password, student = create_school_student_directly(
-            class_access_code
-        )
+        (
+            student_name,
+            student_password,
+            student,
+        ) = create_school_student_directly(class_access_code)
 
         # Expected context data when a student hasn't played anything yet
         EXPECTED_DATA_FIRST_LOGIN = {
-            "num_completed": 0,
-            "num_top_scores": 0,
-            "total_score": 0,
-            "total_available_score": 2070,
+            "rapid_router": {
+                "num_completed": 0,
+                "num_top_scores": 0,
+                "total_score": 0,
+                "total_available_score": 1450,
+            },
+            "python_den": {
+                "num_completed": 0,
+                "num_top_scores": 0,
+                "total_score": 0,
+                "total_available_score": 830,
+            },
         }
 
         # Expected context data when a student has attempted some RR levels
         EXPECTED_DATA_WITH_ATTEMPTS = {
-            "num_completed": 2,
-            "num_top_scores": 1,
-            "total_score": 39,
-            "total_available_score": 2070,
+            "rapid_router": {
+                "num_completed": 2,
+                "num_top_scores": 1,
+                "total_score": 39,
+                "total_available_score": 1450,
+            },
+            "python_den": {
+                "num_completed": 2,
+                "num_top_scores": 2,
+                "total_score": 30,
+                "total_available_score": 830,
+            },
         }
 
-        # Expected context data when a student has also attempted some custom RR levels
+        # Expected context data when a student has also attempted some custom RR
+        # levels
         EXPECTED_DATA_WITH_CUSTOM_ATTEMPTS = {
-            "num_completed": 2,
-            "num_top_scores": 1,
-            "total_score": 39,
-            "total_available_score": 2070,
-            "total_custom_score": 10,
-            "total_custom_available_score": 20,
-        }
-
-        # Expected context data when a student also has access to a Kurono game
-        EXPECTED_DATA_WITH_KURONO_GAME = {
-            "num_completed": 2,
-            "num_top_scores": 1,
-            "total_score": 39,
-            "total_available_score": 2070,
-            "total_custom_score": 10,
-            "total_custom_available_score": 20,
-            "worksheet_id": 3,
-            "worksheet_image": "images/worksheets/ancient.jpg",
+            "rapid_router": {
+                "num_completed": 2,
+                "num_top_scores": 1,
+                "total_score": 39,
+                "total_available_score": 1450,
+                "total_custom_score": 10,
+                "total_custom_available_score": 20,
+            },
+            "python_den": {
+                "num_completed": 2,
+                "num_top_scores": 2,
+                "total_score": 30,
+                "total_available_score": 830,
+            },
         }
 
         c = Client()
 
         # Login and check initial data
-        url = reverse("student_login", kwargs={"access_code": class_access_code})
+        url = reverse(
+            "student_login", kwargs={"access_code": class_access_code}
+        )
         c.post(url, {"username": student_name, "password": student_password})
 
         student_dashboard_url = reverse("student_details")
@@ -519,26 +652,33 @@ class TestViews(TestCase):
         assert response.status_code == 200
         assert response.context_data == EXPECTED_DATA_FIRST_LOGIN
 
-        # Attempt the first two levels, one perfect attempt, one not
+        # Attempt the first two RR levels, one perfect attempt, one not
         level1 = Level.objects.get(name="1")
         level2 = Level.objects.get(name="2")
 
         create_attempt(student, level1, 20)
         create_attempt(student, level2, 19)
 
+        # Attempt the first and fourth Python Den levels, both perfect
+        level1001 = Level.objects.get(name="1001")
+        level1004 = Level.objects.get(name="1004")
+
+        create_attempt(student, level1001, 20)
+        create_attempt(student, level1004, 10)
+
         response = c.get(student_dashboard_url)
 
         assert response.status_code == 200
         assert response.context_data == EXPECTED_DATA_WITH_ATTEMPTS
 
-        # Teacher creates 3 custom levels, only shares the first 2 with the student.
-        # Check that the total available score only includes the levels shared with the
-        # student. Student attempts one level only.
+        # Teacher creates 3 custom levels, only shares the first 2 with the
+        # student. Check that the total available score only includes the
+        # levels shared with the student. Student attempts one level only.
         custom_level1_id = create_save_level(student.class_field.teacher)
         custom_level2_id = create_save_level(student.class_field.teacher)
         create_save_level(student.class_field.teacher)
-        custom_level1 = Level.objects.get(id=custom_level1_id)
-        custom_level2 = Level.objects.get(id=custom_level2_id)
+        custom_level1 = Level.objects.get(id=custom_level1_id.id)
+        custom_level2 = Level.objects.get(id=custom_level2_id.id)
 
         student.new_user.shared.add(custom_level1, custom_level2)
         student.new_user.save()
@@ -550,11 +690,695 @@ class TestViews(TestCase):
         assert response.status_code == 200
         assert response.context_data == EXPECTED_DATA_WITH_CUSTOM_ATTEMPTS
 
-        # Link Kurono game to student's class
-        game = Game(game_class=klass, worksheet_id=3)
-        game.save()
+    @patch("portal.views.registration.send_dotdigital_email")
+    def test_delete_account(self, mock_send_dotdigital_email: Mock):
+        email, password = signup_teacher_directly()
+        u = User.objects.get(email=email)
+        usrid = u.id
 
-        response = c.get(student_dashboard_url)
+        c = Client()
+        url = reverse("teacher_login")
+        c.post(
+            url,
+            {
+                "auth-username": email,
+                "auth-password": password,
+                "teacher_login_view-current_step": "auth",
+            },
+        )
 
-        assert response.status_code == 200
-        assert response.context_data == EXPECTED_DATA_WITH_KURONO_GAME
+        # fail to delete with incorrect password
+        url = reverse("delete_account")
+        response = c.post(url, {"password": "wrongPassword"})
+
+        assert response.status_code == 302
+        mock_send_dotdigital_email.assert_not_called()
+
+        # user has not been anonymised
+        u = User.objects.get(email=email)
+        assert u.id == usrid
+
+        # try again with the correct password
+        url = reverse("delete_account")
+        response = c.post(
+            url, {"password": password, "unsubscribe_newsletter": "on"}
+        )
+
+        assert response.status_code == 302
+        mock_send_dotdigital_email.assert_called_once()
+        assert response.url == reverse("home")
+
+        # user has been anonymised
+        u = User.objects.get(id=usrid)
+        assert u.first_name == "Deleted"
+        assert not u.is_active
+
+        assert c.login(username=email, password=password) == False
+
+    @patch("portal.views.registration.send_dotdigital_email")
+    def test_delete_account_admin(self, mock_send_dotdigital_email: Mock):
+        """test the passing of admin role after deletion of an admin account"""
+
+        email1, password1 = signup_teacher_directly()
+        email2, password2 = signup_teacher_directly()
+        email3, password3 = signup_teacher_directly()
+        email4, password4 = signup_teacher_directly()
+
+        user1 = User.objects.get(email=email1)
+        user1.last_name = "Amir"
+        user1.save()
+        usrid1 = user1.id
+
+        user2 = User.objects.get(email=email2)
+        user2.last_name = "Bee"
+        user2.save()
+        usrid2 = user2.id
+
+        user3 = User.objects.get(email=email3)
+        user3.last_name = "Jung"
+        user3.save()
+        usrid3 = user3.id
+
+        user4 = User.objects.get(email=email4)
+        user4.last_name = "Kook"
+        user4.save()
+        usrid4 = user4.id
+
+        school = create_organisation_directly(email1)
+        klass, class_name, access_code_1 = create_class_directly(email1)
+        class_id = klass.id
+        _, _, student = create_school_student_directly(access_code_1)
+        student_user_id = student.new_user.id
+
+        join_teacher_to_organisation(email2, school.name)
+        _, _, access_code_2 = create_class_directly(email2)
+        create_school_student_directly(access_code_2)
+
+        join_teacher_to_organisation(email3, school.name)
+        join_teacher_to_organisation(email4, school.name)
+
+        c = Client()
+        url = reverse("teacher_login")
+        c.post(
+            url,
+            {
+                "auth-username": email1,
+                "auth-password": password1,
+                "teacher_login_view-current_step": "auth",
+            },
+        )
+
+        # delete teacher1 account
+        url = reverse("delete_account")
+        c.post(url, {"password": password1})
+        mock_send_dotdigital_email.assert_called_once()
+
+        # user has been anonymised
+        u = User.objects.get(id=usrid1)
+        assert not u.is_active
+
+        # check that the class and student have been anonymised
+        assert not Class._base_manager.get(pk=class_id).is_active
+        student_user1 = User.objects.get(id=student_user_id)
+        assert not student_user1.is_active
+
+        school_id = school.id
+        school_name = school.name
+        teachers = Teacher.objects.filter(school=school).order_by(
+            "new_user__last_name", "new_user__first_name"
+        )
+        assert len(teachers) == 3
+
+        # one of the remaining teachers should be admin (the second in our case, as it's alphabetical)
+        u = User.objects.get(id=usrid2)
+        assert u.new_teacher.is_admin
+        u = User.objects.get(id=usrid3)
+        assert not u.new_teacher.is_admin
+        u = User.objects.get(id=usrid4)
+        assert not u.new_teacher.is_admin
+
+        # make teacher 3 admin
+        user3.new_teacher.is_admin = True
+        user3.new_teacher.save()
+
+        url = reverse("teacher_login")
+        c.post(
+            url,
+            {
+                "auth-username": email3,
+                "auth-password": password3,
+                "teacher_login_view-current_step": "auth",
+            },
+        )
+
+        # now delete teacher3 account
+        url = reverse("delete_account")
+        c.post(url, {"password": password3})
+        self.assertEqual(mock_send_dotdigital_email.call_count, 2)
+
+        # 2 teachers left
+        teachers = Teacher.objects.filter(school=school).order_by(
+            "new_user__last_name", "new_user__first_name"
+        )
+        assert len(teachers) == 2
+
+        # teacher2 should still be admin, teacher4 is not passed admin role because there is teacher2
+        u = User.objects.get(id=usrid2)
+        assert u.new_teacher.is_admin
+        u = User.objects.get(id=usrid4)
+        assert not u.new_teacher.is_admin
+
+        # delete teacher4
+        anonymise(user4)
+
+        teachers = Teacher.objects.filter(school=school).order_by(
+            "new_user__last_name", "new_user__first_name"
+        )
+        assert len(teachers) == 1
+        u = User.objects.get(id=usrid2)
+        assert u.new_teacher.is_admin
+
+        # delete teacher2 (the last one left)
+        url = reverse("teacher_login")
+        c.post(
+            url,
+            {
+                "auth-username": email2,
+                "auth-password": password2,
+                "teacher_login_view-current_step": "auth",
+            },
+        )
+
+        url = reverse("delete_account")
+        c.post(url, {"password": password2})
+        self.assertEqual(mock_send_dotdigital_email.call_count, 3)
+
+        # school should be anonymised
+        school = School._base_manager.get(id=school_id)
+        assert school.name != school_name
+        assert not school.is_active
+
+        with pytest.raises(School.DoesNotExist):
+            School.objects.get(id=school_id)
+
+    def test_legal_pages_load(self):
+        c = Client()
+
+        assert c.get(reverse("privacy_notice")).status_code == 200
+        assert c.get(reverse("terms")).status_code == 200
+
+    def test_logged_in_as_admin_check(self):
+        email1, password1 = signup_teacher_directly()
+        email2, password2 = signup_teacher_directly()
+        school = create_organisation_directly(email1)
+        join_teacher_to_organisation(email2, school.name)
+
+        teacher1 = Teacher.objects.get(new_user__username=email1)
+        teacher2 = Teacher.objects.get(new_user__username=email2)
+
+        c = Client()
+
+        c.login(username=email1, password=password1)
+
+        assert is_logged_in_as_admin_teacher(teacher1.new_user)
+
+        c.logout()
+
+        c.login(username=email2, password=password2)
+
+        assert not is_logged_in_as_admin_teacher(teacher2.new_user)
+
+        c.logout()
+
+    @patch("common.helpers.emails.send_dotdigital_email")
+    def test_registrations_increment_data(
+        self, mock_send_dotdigital_email: Mock
+    ):
+        c = Client()
+
+        total_activity = TotalActivity.objects.get(id=1)
+        teacher_registration_count = total_activity.teacher_registrations
+        student_registration_count = total_activity.student_registrations
+        independent_registration_count = (
+            total_activity.independent_registrations
+        )
+
+        response = c.post(
+            reverse("register"),
+            {
+                "teacher_signup-teacher_first_name": "Test Name",
+                "teacher_signup-teacher_last_name": "Test Last Name",
+                "teacher_signup-teacher_email": "test@email.com",
+                "teacher_signup-consent_ticked": "on",
+                "teacher_signup-teacher_password": "$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn",
+                "teacher_signup-teacher_confirm_password": "$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn",
+                "g-recaptcha-response": "something",
+            },
+        )
+
+        assert response.status_code == 302
+        mock_send_dotdigital_email.assert_called_once()
+
+        total_activity = TotalActivity.objects.get(id=1)
+
+        assert (
+            total_activity.teacher_registrations
+            == teacher_registration_count + 1
+        )
+
+        response = c.post(
+            reverse("register"),
+            {
+                "independent_student_signup-date_of_birth_day": 7,
+                "independent_student_signup-date_of_birth_month": 10,
+                "independent_student_signup-date_of_birth_year": 1997,
+                "independent_student_signup-name": "Test Name",
+                "independent_student_signup-email": "test@indy-email.com",
+                "independent_student_signup-consent_ticked": "on",
+                "independent_student_signup-password": "$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn",
+                "independent_student_signup-confirm_password": "$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn$RFVBGT%6yhn",
+                "g-recaptcha-response": "something",
+            },
+        )
+
+        assert response.status_code == 302
+        mock_send_dotdigital_email.assert_called()
+
+        total_activity = TotalActivity.objects.get(id=1)
+
+        assert (
+            total_activity.independent_registrations
+            == independent_registration_count + 1
+        )
+
+        teacher_email, teacher_password = signup_teacher_directly()
+        create_organisation_directly(teacher_email)
+        _, _, access_code = create_class_directly(teacher_email)
+
+        c.login(username=teacher_email, password=teacher_password)
+        c.post(
+            reverse("view_class", kwargs={"access_code": access_code}),
+            {"names": "Student 1, Student 2, Student 3"},
+        )
+
+        assert response.status_code == 302
+
+        total_activity = TotalActivity.objects.get(id=1)
+
+        assert (
+            total_activity.student_registrations
+            == student_registration_count + 3
+        )
+
+
+# CRON view tests
+
+
+class CronTestClient(APIClient):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs, HTTP_X_APPENGINE_CRON="true")
+
+    def generic(
+        self,
+        method,
+        path,
+        data="",
+        content_type="application/octet-stream",
+        secure=False,
+        **extra,
+    ):
+        wsgi_response = super().generic(
+            method, path, data, content_type, secure, **extra
+        )
+        assert (
+            200 <= wsgi_response.status_code < 300
+        ), f"Response has error status code: {wsgi_response.status_code}"
+
+        return wsgi_response
+
+
+class CronTestCase(APITestCase):
+    client_class = CronTestClient
+
+
+class TestUser(CronTestCase):
+    # TODO: use fixtures
+    def setUp(self):
+        teacher_email, _ = signup_teacher_directly(preverified=False)
+        create_organisation_directly(teacher_email)
+        _, _, access_code = create_class_directly(teacher_email)
+        _, _, student = create_school_student_directly(access_code)
+        indy_email, _, _ = create_independent_student_directly()
+
+        self.teacher_user = User.objects.get(email=teacher_email)
+        self.teacher_user_profile = UserProfile.objects.get(
+            user=self.teacher_user
+        )
+
+        self.indy_user = User.objects.get(email=indy_email)
+        self.indy_user_profile = UserProfile.objects.get(user=self.indy_user)
+
+        self.student_user: User = student.new_user
+
+    @patch("portal.views.cron.user.send_dotdigital_email")
+    def send_verify_email_reminder(
+        self,
+        days: int,
+        is_verified: bool,
+        view_name: str,
+        assert_called: bool,
+        mock_send_dotdigital_email: Mock,
+    ):
+        self.teacher_user.date_joined = timezone.now() - timedelta(
+            days=days, hours=12
+        )
+        self.teacher_user.save()
+        self.student_user.date_joined = timezone.now() - timedelta(
+            days=days, hours=12
+        )
+        self.student_user.save()
+        self.indy_user.date_joined = timezone.now() - timedelta(
+            days=days, hours=12
+        )
+        self.indy_user.save()
+
+        self.teacher_user_profile.is_verified = is_verified
+        self.teacher_user_profile.save()
+        self.indy_user_profile.is_verified = is_verified
+        self.indy_user_profile.save()
+
+        self.client.get(reverse(view_name))
+
+        if assert_called:
+            mock_send_dotdigital_email.assert_any_call(
+                ANY, [self.teacher_user.email], personalization_values=ANY
+            )
+
+            mock_send_dotdigital_email.assert_any_call(
+                ANY, [self.indy_user.email], personalization_values=ANY
+            )
+
+            # Check only two emails are sent - the student should never be included.
+            assert mock_send_dotdigital_email.call_count == 2
+        else:
+            mock_send_dotdigital_email.assert_not_called()
+
+        mock_send_dotdigital_email.reset_mock()
+
+    def test_first_verify_email_reminder_view(self):
+        self.send_verify_email_reminder(
+            6, False, "first-verify-email-reminder", False
+        )
+        self.send_verify_email_reminder(
+            7, False, "first-verify-email-reminder", True
+        )
+        self.send_verify_email_reminder(
+            7, True, "first-verify-email-reminder", False
+        )
+        self.send_verify_email_reminder(
+            8, False, "first-verify-email-reminder", False
+        )
+
+    def test_second_verify_email_reminder_view(self):
+        self.send_verify_email_reminder(
+            13, False, "second-verify-email-reminder", False
+        )
+        self.send_verify_email_reminder(
+            14, False, "second-verify-email-reminder", True
+        )
+        self.send_verify_email_reminder(
+            14, True, "second-verify-email-reminder", False
+        )
+        self.send_verify_email_reminder(
+            15, False, "second-verify-email-reminder", False
+        )
+
+    def test_anonymise_unverified_accounts_view(self):
+        now = timezone.now()
+
+        for user in [self.teacher_user, self.indy_user, self.student_user]:
+            user.date_joined = now - timedelta(
+                days=USER_DELETE_UNVERIFIED_ACCOUNT_DAYS + 1
+            )
+            user.save()
+
+        for user_profile in [self.teacher_user_profile, self.indy_user_profile]:
+            user_profile.is_verified = True
+            user_profile.save()
+
+        def anonymise_unverified_users(
+            days: int,
+            is_verified: bool,
+            assert_active: bool,
+        ):
+            date_joined = now - timedelta(days=days, hours=12)
+
+            # Create teacher.
+            teacher_user = User.objects.create(
+                first_name="Unverified",
+                last_name="Teacher",
+                username="unverified.teacher@codeforlife.com",
+                email="unverified.teacher@codeforlife.com",
+                date_joined=date_joined,
+            )
+            teacher_user_profile = UserProfile.objects.create(
+                user=teacher_user,
+                is_verified=is_verified,
+            )
+            Teacher.objects.create(
+                user=teacher_user_profile,
+                new_user=teacher_user,
+                school=self.teacher_user.new_teacher.school,
+            )
+
+            # Create dependent student.
+            student_user = User.objects.create(
+                first_name="Unverified",
+                last_name="DependentStudent",
+                username="UnverifiedDependentStudent",
+                date_joined=date_joined,
+            )
+            student_user_profile = UserProfile.objects.create(
+                user=student_user,
+            )
+            Student.objects.create(
+                user=student_user_profile,
+                new_user=student_user,
+                class_field=self.student_user.new_student.class_field,
+            )
+
+            # Create independent student.
+            indy_user = User.objects.create(
+                first_name="Unverified",
+                last_name="IndependentStudent",
+                username="unverified.independentstudent@codeforlife.com",
+                email="unverified.independentstudent@codeforlife.com",
+                date_joined=date_joined,
+            )
+            indy_user_profile = UserProfile.objects.create(
+                user=indy_user,
+                is_verified=is_verified,
+            )
+            Student.objects.create(
+                user=indy_user_profile,
+                new_user=indy_user,
+            )
+
+            activity_today = DailyActivity.objects.get_or_create(
+                date=datetime.now().date()
+            )[0]
+            daily_teacher_count = activity_today.anonymised_unverified_teachers
+            daily_indy_count = activity_today.anonymised_unverified_independents
+
+            total_activity = TotalActivity.objects.get(id=1)
+            total_teacher_count = total_activity.anonymised_unverified_teachers
+            total_indy_count = total_activity.anonymised_unverified_independents
+
+            self.client.get(reverse("anonymise-unverified-accounts"))
+
+            # Assert the verified users exist
+            assert User.objects.get(id=self.teacher_user.id).is_active
+            assert User.objects.get(id=self.student_user.id).is_active
+            assert User.objects.get(id=self.indy_user.id).is_active
+
+            teacher_user_active = User.objects.get(id=teacher_user.id).is_active
+            indy_user_active = User.objects.get(id=indy_user.id).is_active
+            student_user_active = User.objects.get(id=student_user.id).is_active
+
+            assert teacher_user_active == assert_active
+            assert indy_user_active == assert_active
+            assert student_user_active
+
+            activity_today = DailyActivity.objects.get_or_create(
+                date=datetime.now().date()
+            )[0]
+            total_activity = TotalActivity.objects.get(id=1)
+
+            if not teacher_user_active:
+                assert (
+                    activity_today.anonymised_unverified_teachers
+                    == daily_teacher_count + 1
+                )
+                assert (
+                    total_activity.anonymised_unverified_teachers
+                    == total_teacher_count + 1
+                )
+
+            if not indy_user_active:
+                assert (
+                    activity_today.anonymised_unverified_independents
+                    == daily_indy_count + 1
+                )
+                assert (
+                    total_activity.anonymised_unverified_independents
+                    == total_indy_count + 1
+                )
+
+            teacher_user.delete()
+            indy_user.delete()
+            student_user.delete()
+
+        anonymise_unverified_users(
+            days=USER_DELETE_UNVERIFIED_ACCOUNT_DAYS - 1,
+            is_verified=False,
+            assert_active=True,
+        )
+        anonymise_unverified_users(
+            days=USER_DELETE_UNVERIFIED_ACCOUNT_DAYS,
+            is_verified=False,
+            assert_active=False,
+        )
+        anonymise_unverified_users(
+            days=USER_DELETE_UNVERIFIED_ACCOUNT_DAYS,
+            is_verified=True,
+            assert_active=True,
+        )
+        anonymise_unverified_users(
+            days=USER_DELETE_UNVERIFIED_ACCOUNT_DAYS + 1,
+            is_verified=False,
+            assert_active=False,
+        )
+
+    @patch("portal.views.cron.user.send_dotdigital_email")
+    def send_inactivity_reminder(
+        self,
+        days: int,
+        view_name: str,
+        assert_called: bool,
+        campaign_name: str,
+        mock_send_dotdigital_email: Mock,
+        personalization_values=None,
+    ):
+        self.teacher_user.date_joined = timezone.now() - timedelta(
+            days=days, hours=12
+        )
+        self.teacher_user.save()
+        self.student_user.date_joined = timezone.now() - timedelta(
+            days=days, hours=12
+        )
+        self.student_user.save()
+        self.indy_user.last_login = timezone.now() - timedelta(
+            days=days, hours=12
+        )
+        self.indy_user.save()
+
+        self.client.get(reverse(view_name))
+
+        if assert_called:
+            if personalization_values is not None:
+                mock_send_dotdigital_email.assert_any_call(
+                    campaign_ids[campaign_name],
+                    [self.teacher_user.email],
+                    personalization_values=personalization_values,
+                )
+
+                mock_send_dotdigital_email.assert_any_call(
+                    campaign_ids[campaign_name],
+                    [self.indy_user.email],
+                    personalization_values=personalization_values,
+                )
+            else:
+                mock_send_dotdigital_email.assert_any_call(
+                    campaign_ids[campaign_name],
+                    [self.teacher_user.email],
+                )
+
+                mock_send_dotdigital_email.assert_any_call(
+                    campaign_ids[campaign_name],
+                    [self.indy_user.email],
+                )
+
+            # Check only two emails are sent - the student should never be included.
+            assert mock_send_dotdigital_email.call_count == 2
+        else:
+            mock_send_dotdigital_email.assert_not_called()
+
+        mock_send_dotdigital_email.reset_mock()
+
+    def test_first_inactivity_reminder_view(self):
+        self.send_inactivity_reminder(
+            729,
+            "first-inactivity-reminder",
+            False,
+            "inactive_users_on_website_first_reminder",
+        )
+        self.send_inactivity_reminder(
+            730,
+            "first-inactivity-reminder",
+            True,
+            "inactive_users_on_website_first_reminder",
+        )
+        self.send_inactivity_reminder(
+            731,
+            "first-inactivity-reminder",
+            False,
+            "inactive_users_on_website_first_reminder",
+        )
+
+    def test_second_inactivity_reminder_view(self):
+        self.send_inactivity_reminder(
+            972,
+            "second-inactivity-reminder",
+            False,
+            "inactive_users_on_website_second_reminder",
+        )
+        self.send_inactivity_reminder(
+            973,
+            "second-inactivity-reminder",
+            True,
+            "inactive_users_on_website_second_reminder",
+            personalization_values={
+                "DAYS_LEFT": USER_RETENTION_PERIOD
+                - USER_2ND_INACTIVE_REMINDER_DAYS
+            },
+        )
+        self.send_inactivity_reminder(
+            974,
+            "second-inactivity-reminder",
+            False,
+            "inactive_users_on_website_second_reminder",
+        )
+
+    def test_final_inactivity_reminder_view(self):
+        self.send_inactivity_reminder(
+            1064,
+            "final-inactivity-reminder",
+            False,
+            "inactive_users_on_website_final_reminder",
+        )
+        self.send_inactivity_reminder(
+            1065,
+            "final-inactivity-reminder",
+            True,
+            "inactive_users_on_website_final_reminder",
+            personalization_values={
+                "DAYS_LEFT": USER_RETENTION_PERIOD
+                - USER_FINAL_INACTIVE_REMINDER_DAYS
+            },
+        )
+        self.send_inactivity_reminder(
+            1066,
+            "final-inactivity-reminder",
+            False,
+            "inactive_users_on_website_final_reminder",
+        )