125 lines
3.5 KiB
Ruby
125 lines
3.5 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require "test_helper"
|
|
|
|
class ChangesetCommentApiCapabilityTest < ActiveSupport::TestCase
|
|
test "as a normal user without scopes" do
|
|
user = create(:user)
|
|
scopes = Set.new
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
assert ability.cannot? :create, ChangesetComment
|
|
assert ability.cannot? :create, :changeset_comment_visibility
|
|
assert ability.cannot? :destroy, :changeset_comment_visibility
|
|
end
|
|
|
|
test "as a normal user with write_changeset_comments scope" do
|
|
user = create(:user)
|
|
scopes = Set.new %w[write_changeset_comments]
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
assert ability.can? :create, ChangesetComment
|
|
assert ability.cannot? :create, :changeset_comment_visibility
|
|
assert ability.cannot? :destroy, :changeset_comment_visibility
|
|
end
|
|
|
|
test "as a moderator without scopes" do
|
|
user = create(:moderator_user)
|
|
scopes = Set.new
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
assert ability.cannot? :create, ChangesetComment
|
|
assert ability.cannot? :create, :changeset_comment_visibility
|
|
assert ability.cannot? :destroy, :changeset_comment_visibility
|
|
end
|
|
|
|
test "as a moderator with write_changeset_comments scope" do
|
|
user = create(:moderator_user)
|
|
scopes = Set.new %w[write_changeset_comments]
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
assert ability.can? :create, ChangesetComment
|
|
assert ability.can? :create, :changeset_comment_visibility
|
|
assert ability.can? :destroy, :changeset_comment_visibility
|
|
end
|
|
end
|
|
|
|
class NoteApiCapabilityTest < ActiveSupport::TestCase
|
|
test "as a normal user without scopes" do
|
|
user = create(:user)
|
|
scopes = Set.new
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
[:create, :comment, :close, :reopen, :destroy].each do |action|
|
|
assert ability.cannot? action, Note
|
|
end
|
|
end
|
|
|
|
test "as a normal user with write_notes scope" do
|
|
user = create(:user)
|
|
scopes = Set.new %w[write_notes]
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
[:destroy].each do |action|
|
|
assert ability.cannot? action, Note
|
|
end
|
|
|
|
[:create, :comment, :close, :reopen].each do |action|
|
|
assert ability.can? action, Note
|
|
end
|
|
end
|
|
|
|
test "as a moderator without scopes" do
|
|
user = create(:moderator_user)
|
|
scopes = Set.new
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
[:destroy].each do |action|
|
|
assert ability.cannot? action, Note
|
|
end
|
|
end
|
|
|
|
test "as a moderator with write_notes scope" do
|
|
user = create(:moderator_user)
|
|
scopes = Set.new %w[write_notes]
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
[:destroy].each do |action|
|
|
assert ability.can? action, Note
|
|
end
|
|
end
|
|
end
|
|
|
|
class UserApiCapabilityTest < ActiveSupport::TestCase
|
|
test "user preferences" do
|
|
user = create(:user)
|
|
scopes = Set.new
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
[:index, :show, :update_all, :update, :destroy].each do |act|
|
|
assert ability.cannot? act, UserPreference
|
|
end
|
|
|
|
scopes = Set.new %w[read_prefs]
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
[:update_all, :update, :destroy].each do |act|
|
|
assert ability.cannot? act, UserPreference
|
|
end
|
|
|
|
[:index, :show].each do |act|
|
|
assert ability.can? act, UserPreference
|
|
end
|
|
|
|
scopes = Set.new %w[write_prefs]
|
|
ability = ApiAbility.new user, scopes
|
|
|
|
[:index, :show].each do |act|
|
|
assert ability.cannot? act, UserPreference
|
|
end
|
|
|
|
[:update_all, :update, :destroy].each do |act|
|
|
assert ability.can? act, UserPreference
|
|
end
|
|
end
|
|
end
|