SDW test scenario: Basic Functionality

SDW Test Scenario: Basic Functionality

Setup:

• server is available and contains source test data
• test instance contains several sources, including some with files & some with HTML characters in messages

Updater

• Disconnect network (either by disabling wireless connections in sys-net network widget or unplugging wired connection if in use)
  • when SecureDrop desktop icon is double-clicked, preflight updater is displayed but immediately fails with an error related to network access
• Close updater and reconnect to network
  • when SecureDrop desktop icon is double-clicked, preflight updater is displayed and prompts to complete update
  • Update can be started and completed successfully.

Online Mode

Login

• when SecureDrop desktop icon is double-clicked, preflight updater is displayed
• After preflight updater runs, when user clicks Continue, login dialog is displayed
• In login dialog:
  • show/hide password functionality works
  • incorrect password cannot log in
  • 2FA token reuse cannot log in after password failure
  • invalid 2FA token cannot log in
  • valid credentials and 2FA can log in

Sources

• after valid login:
  • the login dialog closes
  • source data is downloaded and source list is populated
  • user is prompted for GPG key access
  • submissions and replies are decrypted
  • the source list is displayed but no sources are selected by default
  • the conversation view is not populated
• when a source is selected in source list:
  • conversation view is populated with source conversation
  • a source message containing HTML is displayed as unformatted text
  • source submissions have an active Download button
  • source submission compressed file size is displayed accurately
• when the upper right 3-dot button is clicked:
  • a menu is displayed with a delete source account option
  • when delete source account is selected:
    • the source is deleted from the source list and the conversation view is blanked
    • the source is deleted from the server and not restored on next sync
    • source submissions and messages are removed from the client's data directory
• when a source is starred in source list, and the client is closed and reopened in Online mode:
  • the source is still starred in the source list

Replies

• when a source is selected in the source list:
  • the reply panel is available for use and there is no message asking the user to sign in
  • a reply can be added to the conversation
  • a pending reply can be added to the conversation (ie., by disconnecting the network or shutting down sd-whonix just before sending a reply)
  • a reply containing HTML is displayed as unformatted text
  • a reply with a single string of characters longer than 100 chars is displayed, but truncated
  • a reply with a line longer than 100 chars is displayed correctly
  • two replies added immediately after each other are ordered correctly

Submissions

Preview

• when Download is clicked on a submission:
  • the submission is downloaded and decrypted
  • the Download button is replaced with Print and Export options
  • the submission filename is displayed.
• For a DOC submission:
  • when the submission filename is clicked, a disposable VM (dispVM) is started.
  • after the dispVM starts, the submission is displayed in LibreOffice
  • when LibreOffice is closed, the dispVM shuts down
• For a PDF submission:
  • when the submission filename is clicked, a dispVM is started.
  • after the dispVM starts, the submission is displayed in evince
  • when evince is closed, the dispVM shuts down
• For a JPEG submission:
  • when the submission filename is clicked, a dispVM is started.
  • after the dispVM starts, the submission is displayed in Image Viewer
  • when Image Viewer is closed, the dispVM shuts down
• For an audio submission:
  • when the submission filename is clicked, a dispVM is started.
  • After the dispVM starts, the submission is played in Audacious
  • Sound is audible
  • when Audacious is closed, the dispVM shuts down
• For a video submission:
  • when the submission filename is clicked, a dispVM is started.
  • After the dispVM starts, the submission is played in Totem
  • Sound is audible if applicable
  • when Totem is closed, the dispVM shuts down
• For a compressed (archive) submission:
  • when the submission filename is clicked, a dispVM is started.
  • After the dispVM starts, the submission is opened in FileRoller
  • Individual files can be extracted and previewed
  • when FileRoller is closed, the dispVM shuts down

Closing the client

• When the user clicks the main window close button:
  • the client exits.