Since these pages are not accessed by normal users, except for url fiddling, it's fine to respond with a generic access denied.
144 lines
4.5 KiB
Ruby
144 lines
4.5 KiB
Ruby
require "test_helper"
|
|
|
|
class IssuesControllerTest < ActionController::TestCase
|
|
def test_index
|
|
# Access issues list without login
|
|
get :index
|
|
assert_response :redirect
|
|
assert_redirected_to login_path(:referer => issues_path)
|
|
|
|
# Access issues list as normal user
|
|
session[:user] = create(:user).id
|
|
get :index
|
|
assert_response :redirect
|
|
assert_redirected_to :controller => :errors, :action => :forbidden
|
|
|
|
# Access issues list as administrator
|
|
session[:user] = create(:administrator_user).id
|
|
get :index
|
|
assert_response :success
|
|
|
|
# Access issues list as moderator
|
|
session[:user] = create(:moderator_user).id
|
|
get :index
|
|
assert_response :success
|
|
end
|
|
|
|
def test_show
|
|
target_user = create(:user)
|
|
issue = create(:issue, :reportable => target_user, :reported_user => target_user)
|
|
|
|
# Access issue without login
|
|
get :show, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to login_path(:referer => issue_path(issue))
|
|
|
|
# Access issue as normal user
|
|
session[:user] = create(:user).id
|
|
get :show, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to :controller => :errors, :action => :forbidden
|
|
|
|
# Access issue as administrator
|
|
session[:user] = create(:administrator_user).id
|
|
get :show, :params => { :id => issue.id }
|
|
assert_response :success
|
|
|
|
# Access issue as moderator
|
|
session[:user] = create(:moderator_user).id
|
|
get :show, :params => { :id => issue.id }
|
|
assert_response :success
|
|
end
|
|
|
|
def test_resolve
|
|
target_user = create(:user)
|
|
issue = create(:issue, :reportable => target_user, :reported_user => target_user)
|
|
|
|
# Resolve issue without login
|
|
get :resolve, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to login_path(:referer => resolve_issue_path(issue))
|
|
|
|
# Resolve issue as normal user
|
|
session[:user] = create(:user).id
|
|
get :resolve, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to :controller => :errors, :action => :forbidden
|
|
|
|
# Resolve issue as administrator
|
|
session[:user] = create(:administrator_user).id
|
|
get :resolve, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_equal true, issue.reload.resolved?
|
|
|
|
issue.reopen!
|
|
|
|
# Resolve issue as moderator
|
|
session[:user] = create(:moderator_user).id
|
|
get :resolve, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_equal true, issue.reload.resolved?
|
|
end
|
|
|
|
def test_ignore
|
|
target_user = create(:user)
|
|
issue = create(:issue, :reportable => target_user, :reported_user => target_user)
|
|
|
|
# Ignore issue without login
|
|
get :ignore, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to login_path(:referer => ignore_issue_path(issue))
|
|
|
|
# Ignore issue as normal user
|
|
session[:user] = create(:user).id
|
|
get :ignore, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to :controller => :errors, :action => :forbidden
|
|
|
|
# Ignore issue as administrator
|
|
session[:user] = create(:administrator_user).id
|
|
get :ignore, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_equal true, issue.reload.ignored?
|
|
|
|
issue.reopen!
|
|
|
|
# Ignore issue as moderator
|
|
session[:user] = create(:moderator_user).id
|
|
get :ignore, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_equal true, issue.reload.ignored?
|
|
end
|
|
|
|
def test_reopen
|
|
target_user = create(:user)
|
|
issue = create(:issue, :reportable => target_user, :reported_user => target_user)
|
|
|
|
issue.resolve!
|
|
|
|
# Reopen issue without login
|
|
get :reopen, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to login_path(:referer => reopen_issue_path(issue))
|
|
|
|
# Reopen issue as normal user
|
|
session[:user] = create(:user).id
|
|
get :reopen, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_redirected_to :controller => :errors, :action => :forbidden
|
|
|
|
# Reopen issue as administrator
|
|
session[:user] = create(:administrator_user).id
|
|
get :reopen, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_equal true, issue.reload.open?
|
|
|
|
issue.resolve!
|
|
|
|
# Reopen issue as moderator
|
|
session[:user] = create(:moderator_user).id
|
|
get :reopen, :params => { :id => issue.id }
|
|
assert_response :redirect
|
|
assert_equal true, issue.reload.open?
|
|
end
|
|
end
|