scinote-web/spec/permissions/controllers/api/v1/tasks_controller_spec.rb

# frozen_string_literal: true

require 'rails_helper'

describe Api::V1::TasksController, type: :controller do
  include PermissionExtends

  it_behaves_like "a controller with authentication", {
    index: {
      team_id: 1,
      project_id: 1,
      experiment_id: 1,
    },
    show: {
      team_id: 1,
      project_id: 1,
      experiment_id: 1,
      id: 1
    },
    update: {
      team_id: 1,
      project_id: 1,
      experiment_id: 1,
      id: 1
    },
    create: {
      team_id: 1,
      project_id: 1,
      experiment_id: 1,
    },
    activities: {
      team_id: 1,
      project_id: 1,
      experiment_id: 1,
      task_id: 1
    }
  }, [],
  :unauthorized


  describe 'permissions checking' do
    login_api_user

    include_context 'reference_project_structure', {
      team_role: :normal_user
    }

    it_behaves_like "a controller action with permissions checking", :get, :index do
      let(:testable) { experiment }
      let(:permissions) { [ExperimentPermissions::READ] }
      let(:action_params) {
        {
          team_id: team.id,
          project_id: project.id,
          experiment_id: experiment.id
        }
      }
    end

    it_behaves_like "a controller action with permissions checking", :get, :show do
      let(:testable) { my_module }
      let(:permissions) { [MyModulePermissions::READ] }
      let(:action_params) {
        {
          team_id: team.id,
          project_id: project.id,
          experiment_id: experiment.id,
          id: my_module.id
        }
      }
    end

    it_behaves_like "a controller action with permissions checking", :post, :create do
      let(:testable) { experiment }
      let(:permissions) { [ExperimentPermissions::TASKS_MANAGE] }
      let(:action_params) {
        {
          team_id: team.id,
          project_id: project.id,
          experiment_id: experiment.id,
          data: {
            type: "experiments",
            attributes: {
              name: "test"
            }
          }
        }
      }
    end

    it_behaves_like "a controller action with permissions checking", :put, :update do
      let(:testable) { my_module }
      let(:permissions) { [MyModulePermissions::MANAGE] }
      let(:action_params) {
        {
          team_id: team.id,
          project_id: project.id,
          experiment_id: experiment.id,
          id: my_module.id
        }
      }
    end

    it_behaves_like "a controller action with permissions checking", :get, :activities do
      let(:testable) { my_module }
      let(:permissions) { [MyModulePermissions::READ] }
      let(:action_params) {
        {
          team_id: team.id,
          project_id: project.id,
          experiment_id: experiment.id,
          task_id: my_module.id
        }
      }
    end
  end
end