# frozen_string_literal: true require "test_helper" class ChangesetCommentApiCapabilityTest < ActiveSupport::TestCase test "as a normal user without scopes" do user = create(:user) scopes = Set.new ability = ApiAbility.new user, scopes [:create, :destroy, :restore].each do |action| assert ability.cannot? action, ChangesetComment end end test "as a normal user with write_api scope" do user = create(:user) scopes = Set.new %w[write_api] ability = ApiAbility.new user, scopes [:destroy, :restore].each do |action| assert ability.cannot? action, ChangesetComment end [:create].each do |action| assert ability.can? action, ChangesetComment end end test "as a moderator without scopes" do user = create(:moderator_user) scopes = Set.new ability = ApiAbility.new user, scopes [:create, :destroy, :restore].each do |action| assert ability.cannot? action, ChangesetComment end end test "as a moderator with write_api scope" do user = create(:moderator_user) scopes = Set.new %w[write_api] ability = ApiAbility.new user, scopes [:create, :destroy, :restore].each do |action| assert ability.can? action, ChangesetComment end end end class NoteApiCapabilityTest < ActiveSupport::TestCase test "as a normal user without scopes" do user = create(:user) scopes = Set.new ability = ApiAbility.new user, scopes [:create, :comment, :close, :reopen, :destroy].each do |action| assert ability.cannot? action, Note end end test "as a normal user with write_notes scope" do user = create(:user) scopes = Set.new %w[write_notes] ability = ApiAbility.new user, scopes [:destroy].each do |action| assert ability.cannot? action, Note end [:create, :comment, :close, :reopen].each do |action| assert ability.can? action, Note end end test "as a moderator without scopes" do user = create(:moderator_user) scopes = Set.new ability = ApiAbility.new user, scopes [:destroy].each do |action| assert ability.cannot? action, Note end end test "as a moderator with write_notes scope" do user = create(:moderator_user) scopes = Set.new %w[write_notes] ability = ApiAbility.new user, scopes [:destroy].each do |action| assert ability.can? action, Note end end end class UserApiCapabilityTest < ActiveSupport::TestCase test "user preferences" do user = create(:user) scopes = Set.new ability = ApiAbility.new user, scopes [:index, :show, :update_all, :update, :destroy].each do |act| assert ability.cannot? act, UserPreference end scopes = Set.new %w[read_prefs] ability = ApiAbility.new user, scopes [:update_all, :update, :destroy].each do |act| assert ability.cannot? act, UserPreference end [:index, :show].each do |act| assert ability.can? act, UserPreference end scopes = Set.new %w[write_prefs] ability = ApiAbility.new user, scopes [:index, :show].each do |act| assert ability.cannot? act, UserPreference end [:update_all, :update, :destroy].each do |act| assert ability.can? act, UserPreference end end end