# frozen_string_literal: true require "test_helper" class AbilityTest < ActiveSupport::TestCase end class GuestAbilityTest < AbilityTest test "geocoder permission for a guest" do ability = Ability.new nil [:search, :search_latlon, :search_osm_nominatim, :search_osm_nominatim_reverse].each do |action| assert ability.can?(action, :geocoder), "should be able to #{action} geocoder" end end test "diary permissions for a guest" do ability = Ability.new nil [:index, :rss, :show, :comments].each do |action| assert ability.can?(action, DiaryEntry), "should be able to #{action} DiaryEntries" end [:create, :edit, :comment, :subscribe, :unsubscribe, :hide, :hidecomment].each do |action| assert ability.cannot?(action, DiaryEntry), "should not be able to #{action} DiaryEntries" end end test "note permissions for a guest" do ability = Ability.new nil [:index].each do |action| assert ability.can?(action, Note), "should be able to #{action} Notes" end end test "user roles permissions for a guest" do ability = Ability.new nil [:grant, :revoke].each do |action| assert ability.cannot?(action, UserRole), "should not be able to #{action} UserRoles" end end end class UserAbilityTest < AbilityTest test "Diary permissions" do ability = Ability.new create(:user) [:index, :rss, :show, :comments, :create, :edit, :comment, :subscribe, :unsubscribe].each do |action| assert ability.can?(action, DiaryEntry), "should be able to #{action} DiaryEntries" end [:hide, :hidecomment].each do |action| assert ability.cannot?(action, DiaryEntry), "should not be able to #{action} DiaryEntries" end [:index, :show, :resolve, :ignore, :reopen].each do |action| assert ability.cannot?(action, Issue), "should not be able to #{action} Issues" end end end class ModeratorAbilityTest < AbilityTest test "Issue permissions" do ability = Ability.new create(:moderator_user) [:index, :show, :resolve, :ignore, :reopen].each do |action| assert ability.can?(action, Issue), "should be able to #{action} Issues" end end test "User Roles permissions" do ability = Ability.new create(:moderator_user) [:grant, :revoke].each do |action| assert ability.cannot?(action, UserRole), "should not be able to #{action} UserRoles" end [:hide, :hidecomment].each do |action| assert ability.can?(action, DiaryEntry), "should be able to #{action} DiaryEntries" end end end class AdministratorAbilityTest < AbilityTest test "Diary for an administrator" do ability = Ability.new create(:administrator_user) [:index, :rss, :show, :comments, :create, :edit, :comment, :subscribe, :unsubscribe, :hide, :hidecomment].each do |action| assert ability.can?(action, DiaryEntry), "should be able to #{action} DiaryEntries" end end test "User Roles permissions for an administrator" do ability = Ability.new create(:administrator_user) [:grant, :revoke].each do |action| assert ability.can?(action, UserRole), "should be able to #{action} UserRoles" end end end