scinote-web/spec/services/smart_annotations/permission_eval_spec.rb
artoscinote f68d724202
Rework experiment permissions [SCI-6054] (#3538)
* Rework experiment permissions [SCI-6054]
2021-09-30 11:32:11 +02:00

108 lines
3.7 KiB
Ruby

# frozen_string_literal: true
require 'rails_helper'
describe SmartAnnotations::PermissionEval do
let(:subject) { described_class }
let(:user) { create :user }
let(:another_user) { create :user }
let(:team) { create :team }
let(:another_team) { create :team }
let!(:user_team) { create :user_team, user: user, team: team, role: :admin }
let(:project) { create :project, name: 'my project', team: team }
let!(:user_project) { create :user_project, project: project, user: user }
let!(:user_assignment) do
create :user_assignment,
assignable: project,
user: user,
user_role: UserRole.find_by(name: I18n.t('user_roles.predefined.owner')),
assigned_by: user
end
let(:experiment) do
create :experiment, name: 'my experiment',
project: project,
created_by: user,
last_modified_by: user
end
let(:task) { create :my_module, name: 'task', experiment: experiment, created_by: experiment.created_by }
let(:repository) { create :repository, team: team, created_by: user }
let(:repository_item) { create :repository_row, repository: repository }
describe '#validate_prj_permissions/2' do
it 'returns a boolean' do
value = subject.__send__(:validate_prj_permissions, user, team, project)
expect(value).to be_in([true, false])
end
it 'returns false on wrong team' do
value = subject.__send__(:validate_prj_permissions, user, another_team, project)
expect(value).to be false
end
it 'returns true on the same team' do
value = subject.__send__(:validate_prj_permissions, user, team, project)
expect(value).to be true
end
end
describe '#validate_exp_permissions/2' do
it 'returns a boolean' do
value = subject.__send__(:validate_exp_permissions, user, team, experiment)
expect(value).to be_in([true, false])
end
it 'returns false on wrong team' do
value = subject.__send__(:validate_exp_permissions, user, another_team, experiment)
expect(value).to be false
end
it 'returns true on the same team' do
value = subject.__send__(:validate_exp_permissions, user, team, experiment)
expect(value).to be true
end
end
describe '#validate_tsk_permissions/2' do
it 'returns a boolean' do
value = subject.__send__(:validate_tsk_permissions, user, team, task)
expect(value).to be_in([true, false])
end
it 'returns false on wrong team' do
value = subject.__send__(:validate_tsk_permissions, user, another_team, task)
expect(value).to be false
end
it 'returns true on the same team' do
value = subject.__send__(:validate_tsk_permissions, user, team, task)
expect(value).to be true
end
end
describe '#validate_rep_item_permissions/2' do
it 'returns a boolean' do
value = subject.__send__(:validate_rep_item_permissions, user, team, repository_item)
expect(value).to be_in([true, false])
end
it 'returns false on wrong user' do
value = subject.__send__(:validate_rep_item_permissions, another_user, another_team, repository_item)
expect(value).to be false
end
it 'returns true on the same team' do
value = subject.__send__(:validate_rep_item_permissions, user, team, repository_item)
expect(value).to be true
end
context 'when user can access repository from another team, but not with the current' do
it do
# Add anoteher user also as a member of team whos owes repository with this item
create :user_team, team: team, user: another_user, role: :admin
value = subject.__send__(:validate_rep_item_permissions, another_user, another_team, repository_item)
expect(value).to be false
end
end
end
end