transferred Code Ocean from original repository to GitHub

spec/policies/code_ocean/file_policy_spec.rb

@@ -0,0 +1,73 @@
+require 'rails_helper'
+
+describe CodeOcean::FilePolicy do
+  subject { CodeOcean::FilePolicy }
+
+  let(:file) { FactoryGirl.build(:file) }
+  let(:exercise) { FactoryGirl.create(:fibonacci) }
+  let(:submission) { FactoryGirl.create(:submission) }
+
+  permissions :create? do
+    context 'as part of an exercise' do
+      before(:each) { file.context = exercise }
+
+      it 'grants access to admins' do
+        expect(subject).to permit(FactoryGirl.build(:admin), file)
+      end
+
+      it 'grants access to authors' do
+        expect(subject).to permit(exercise.author, file)
+      end
+
+      it 'does not grant access to all other users' do
+        [:external_user, :teacher].each do |factory_name|
+          expect(subject).not_to permit(FactoryGirl.build(factory_name), file)
+        end
+      end
+    end
+
+    context 'as part of a submission' do
+      before(:each) { file.context = submission }
+
+      it 'grants access to authors' do
+        expect(subject).to permit(submission.author, file)
+      end
+
+      it 'does not grant access to all other users' do
+        [:admin, :external_user, :teacher].each do |factory_name|
+          expect(subject).not_to permit(FactoryGirl.build(factory_name), file)
+        end
+      end
+    end
+  end
+
+  permissions :destroy? do
+    context 'as part of an exercise' do
+      before(:each) { file.context = exercise }
+
+      it 'grants access to admins' do
+        expect(subject).to permit(FactoryGirl.build(:admin), file)
+      end
+
+      it 'grants access to authors' do
+        expect(subject).to permit(exercise.author, file)
+      end
+
+      it 'does not grant access to all other users' do
+        [:external_user, :teacher].each do |factory_name|
+          expect(subject).not_to permit(FactoryGirl.build(factory_name), file)
+        end
+      end
+    end
+
+    context 'as part of a submission' do
+      before(:each) { file.context = submission }
+
+      it 'does not grant access to anyone' do
+        [:admin, :external_user, :teacher].each do |factory_name|
+          expect(subject).not_to permit(FactoryGirl.build(factory_name), file)
+        end
+      end
+    end
+  end
+end