Merge ApiCapability class into ApiAbility
This commit is contained in:
parent
e2904daf77
commit
cdce867183
5 changed files with 65 additions and 84 deletions
|
@ -21,7 +21,8 @@ end
|
|||
|
||||
class UserApiAbilityTest < ApiAbilityTest
|
||||
test "Note permissions" do
|
||||
ability = ApiAbility.new create(:user)
|
||||
token = create(:oauth_access_token, :scopes => %w[write_notes])
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:index, :create, :comment, :feed, :show, :search, :close, :reopen].each do |action|
|
||||
assert ability.can?(action, Note), "should be able to #{action} Notes"
|
||||
|
@ -35,7 +36,8 @@ end
|
|||
|
||||
class ModeratorApiAbilityTest < ApiAbilityTest
|
||||
test "Note permissions" do
|
||||
ability = ApiAbility.new create(:moderator_user)
|
||||
token = create(:oauth_access_token, :scopes => %w[write_notes], :resource_owner_id => create(:moderator_user).id)
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:index, :create, :comment, :feed, :show, :search, :close, :reopen, :destroy].each do |action|
|
||||
assert ability.can?(action, Note), "should be able to #{action} Notes"
|
||||
|
|
|
@ -5,41 +5,41 @@ require "test_helper"
|
|||
class ChangesetCommentApiCapabilityTest < ActiveSupport::TestCase
|
||||
test "as a normal user with permissionless token" do
|
||||
token = create(:oauth_access_token)
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:create, :destroy, :restore].each do |action|
|
||||
assert capability.cannot? action, ChangesetComment
|
||||
assert ability.cannot? action, ChangesetComment
|
||||
end
|
||||
end
|
||||
|
||||
test "as a normal user with write_api token" do
|
||||
token = create(:oauth_access_token, :scopes => %w[write_api])
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:destroy, :restore].each do |action|
|
||||
assert capability.cannot? action, ChangesetComment
|
||||
assert ability.cannot? action, ChangesetComment
|
||||
end
|
||||
|
||||
[:create].each do |action|
|
||||
assert capability.can? action, ChangesetComment
|
||||
assert ability.can? action, ChangesetComment
|
||||
end
|
||||
end
|
||||
|
||||
test "as a moderator with permissionless token" do
|
||||
token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id)
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:create, :destroy, :restore].each do |action|
|
||||
assert capability.cannot? action, ChangesetComment
|
||||
assert ability.cannot? action, ChangesetComment
|
||||
end
|
||||
end
|
||||
|
||||
test "as a moderator with write_api token" do
|
||||
token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id, :scopes => %w[write_api])
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:create, :destroy, :restore].each do |action|
|
||||
assert capability.can? action, ChangesetComment
|
||||
assert ability.can? action, ChangesetComment
|
||||
end
|
||||
end
|
||||
end
|
||||
|
@ -47,41 +47,41 @@ end
|
|||
class NoteApiCapabilityTest < ActiveSupport::TestCase
|
||||
test "as a normal user with permissionless token" do
|
||||
token = create(:oauth_access_token)
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:create, :comment, :close, :reopen, :destroy].each do |action|
|
||||
assert capability.cannot? action, Note
|
||||
assert ability.cannot? action, Note
|
||||
end
|
||||
end
|
||||
|
||||
test "as a normal user with write_notes token" do
|
||||
token = create(:oauth_access_token, :scopes => %w[write_notes])
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:destroy].each do |action|
|
||||
assert capability.cannot? action, Note
|
||||
assert ability.cannot? action, Note
|
||||
end
|
||||
|
||||
[:create, :comment, :close, :reopen].each do |action|
|
||||
assert capability.can? action, Note
|
||||
assert ability.can? action, Note
|
||||
end
|
||||
end
|
||||
|
||||
test "as a moderator with permissionless token" do
|
||||
token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id)
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:destroy].each do |action|
|
||||
assert capability.cannot? action, Note
|
||||
assert ability.cannot? action, Note
|
||||
end
|
||||
end
|
||||
|
||||
test "as a moderator with write_notes token" do
|
||||
token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id, :scopes => %w[write_notes])
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:destroy].each do |action|
|
||||
assert capability.can? action, Note
|
||||
assert ability.can? action, Note
|
||||
end
|
||||
end
|
||||
end
|
||||
|
@ -90,32 +90,32 @@ class UserApiCapabilityTest < ActiveSupport::TestCase
|
|||
test "user preferences" do
|
||||
# A user with empty tokens
|
||||
token = create(:oauth_access_token)
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:index, :show, :update_all, :update, :destroy].each do |act|
|
||||
assert capability.cannot? act, UserPreference
|
||||
assert ability.cannot? act, UserPreference
|
||||
end
|
||||
|
||||
token = create(:oauth_access_token, :scopes => %w[read_prefs])
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:update_all, :update, :destroy].each do |act|
|
||||
assert capability.cannot? act, UserPreference
|
||||
assert ability.cannot? act, UserPreference
|
||||
end
|
||||
|
||||
[:index, :show].each do |act|
|
||||
assert capability.can? act, UserPreference
|
||||
assert ability.can? act, UserPreference
|
||||
end
|
||||
|
||||
token = create(:oauth_access_token, :scopes => %w[write_prefs])
|
||||
capability = ApiCapability.new token
|
||||
ability = ApiAbility.new token
|
||||
|
||||
[:index, :show].each do |act|
|
||||
assert capability.cannot? act, UserPreference
|
||||
assert ability.cannot? act, UserPreference
|
||||
end
|
||||
|
||||
[:update_all, :update, :destroy].each do |act|
|
||||
assert capability.can? act, UserPreference
|
||||
assert ability.can? act, UserPreference
|
||||
end
|
||||
end
|
||||
end
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue